Configure SCIM for Azure

This guide will walk through how Enterprise users can set up a SCIM connection with Vimeo for their organization using Azure as their IdP (Identity Provider).

If you’re an existing Vimeo Enterprise customer and don’t have SCIM, please contact your Account Manager for more information. If you are not a Vimeo Enterprise customer yet and are interested in SCIM, please contact us.  

In this article:

• Preparing the Vimeo API application
• Configuring the Azure app
• Provisioning users from Azure to Vimeo
• Tips to configure SCIM for Azure

Preparing the Vimeo API application

1. Open https://developer.vimeo.com
2. Log in as a team owner.
3. Select Get started or New app.
4. Fill out the form, then select Create App.
5. Scroll down to the Generate an access token section.
6. Select Authenticated (you).
7. Select Private, then Scim scopes.
8. Press Generate button.
9. Copy or save newly generated token somewhere, such as a note-taking application.

Configuring the Azure App

1. Go to your existing Vimeo application that is used for Vimeo.
2. Go to Provisioning -> Update credentials -> Open Admin credentials.
3. Set tenant URL as https://api.vimeo.com/scim/v2/1234567, where "1234567" is the Vimeo team owner's User ID (see Prerequisites).
4. Set the Secret token from the section above (Preparing Vimeo API application).
5. Select Test Connection.
6. Save configuration.
7. Open Mappings.

8. Go to Provision Azure Active Directory Groups.

9. Set up like on the screenshot below and Save.

Provisioning users from Azure to Vimeo

The initial step for starting provisioning in Azure is the Start provisioning button in the Azure Enterprise application. 

After that, every user you assign to the application will be provisioned into Vimeo.

After provisioning is initiated you can find out that your team owner account now has team members. 

Tips to configure SCIM for Azure

When you change a user, keep UserName and Email attributes identical. Currently, Vimeo does support the next user attributes. Vimeo supports the below user attributes:

• schemas (read-only, required by SCIM specification)
• id (read-only, required by SCIM specification)
• Username (mutable, requires the same value for email)
• Name (mutable)
• name.formatted (same as givenName+familyName)
• name.givenName
• name.familyName
• displayName (same as givenName+familyName)
• Active (mutable)
• emails (only type=work and primary=true) (mutable)
• profileUrl (read-only)
• locale (mutable)
• groups (read-only, mutable from /Groups endpoint)
• meta (read-only)

Please contact [e-mail] if you have any issues.