Provisioning is a feature used to manage user information in cybozu.cn using the Identity Provider (IdP) such as Microsoft Entra ID and Okta.
When provisioning is enabled, user information in the IdP will be automatically propagated to cybozu.cn.

When provisioning is enabled, the following items from IdP are propagated.

• Login Name
• Display Name
• Surname
• Given Name
• E-mail Address
• Available Services

Departments, Job Titles, and Groups (or Roles) will not be propagated.

1. Click the gear-shaped menu button in the header.

2. Click Users & System Administration.

3. Click Provisioning.

4. Click Create API Token.

5. Select the validity period.

6. Enter "Notes for API Token".

7. Click Create.

8. An API token is created.
   

9. Register the API token and the SCIM Endpoint of cybozu.cn with the IdP.
   Click the button to copy the API token.

10. Close the dialog.

11. Enable "Propagate Provisioning".

If "Propagate Provisioning" is disabled, user information in the IdP will no longer be propagated to cybozu.cn.

1. Click Create API Token.

2. Select the validity period.

3. Enter "Notes for API Token".

4. Click Create.

5. An API token is created.
   

6. Register the API token of cybozu.cn with the IdP.
   Click the button to copy the API token.

7. Close the dialog.

8. Disable the old API token.

9. Click Delete.

• If "Propagate Provisioning" is enabled, users cannot change their login names.
• You cannot synchronize "User available services" from Microsoft Entra ID.
• If you perform any of the following actions while "Propagate Provisioning" is enabled, you might encounter errors when propagating user information from IdP.
  • Delete users propagated from IdP in cybozu.cn.
  • Add users to cybozu.cn first, then add the users with the same user names (same login names) to IdP.
  • Change user names (login names) in Okta.