How to renew SCIM token in Apple Business Manager?

[jsharp01]

To renew a SCIM (System for Cross-domain Identity Management) token in Apple Business Manager, you will need to follow these steps:

1. Log in to your Apple Business Manager account using your admin credentials.
2. Click on "Settings" in the lower-left corner of the screen.
3. Click on the "Integration" tab in the upper-right corner of the screen.
4. Find the integration for which you want to renew the SCIM token and click on it.
5. Scroll down to the "Authentication" section and click on "Renew Token".
6. A pop-up window will appear, prompting you to confirm that you want to renew the token. Click "Renew" to proceed.
7. The new token will be displayed on the "Integration" tab. Copy the token and use it in your SCIM-enabled identity provider to update your integration.

Note that you will need to update your SCIM-enabled identity provider with the new token before the old token expires to ensure uninterrupted SCIM provisioning. The expiration date for the token is shown on the "Integration" tab.

To update the SCIM token in your Azure AD tenant, you will need to follow these steps:

1. Log in to the Azure portal using your admin credentials.
2. Navigate to the "Enterprise applications" section in the left-hand menu.
3. Find and select the Apple Business Manager application that you previously integrated with your Azure AD.
4. Click on the "Single sign-on" tab in the application settings.
5. Under "User provisioning", click on "Edit".
6. In the "Admin Credentials" section, enter your Apple Business Manager admin credentials.
7. In the "SCIM Configuration" section, paste the new SCIM token that you copied from Apple Business Manager.
8. Click on "Test Connection" to ensure that Azure AD can authenticate and establish a connection with Apple Business Manager using the new token.
9. If the test is successful, click on "Save" to update the token.

Once you have updated the SCIM token in Azure AD, it will use the new token to authenticate and establish a connection with Apple Business Manager for user provisioning. Make sure to monitor the integration for any errors or issues that may arise during the update process.

In Apple Business Manager, the SCIM (System for Cross-domain Identity Management) token plays a crucial role in enabling automated user provisioning and management. SCIM is an open standard protocol that allows for the exchange of user identity information between identity providers and service providers.

The SCIM token in Apple Business Manager is important for the following reasons:

1. User Provisioning: With the SCIM token, Apple Business Manager can integrate with an identity provider or an identity management system, such as Microsoft Azure Active Directory or Okta. This integration enables automatic user provisioning, meaning that when new users are added or existing users are modified in the identity provider, those changes can be synchronized and reflected in Apple Business Manager. This simplifies the process of managing user accounts and access to Apple services.
2. Single Sign-On (SSO): SCIM tokens are often used in conjunction with SSO solutions. When users authenticate through the identity provider, the SCIM token ensures that their identities and access rights are synchronized with Apple Business Manager. This allows users to access Apple services using their existing credentials, without the need for separate login credentials for each service.
3. Access Control and Security: The SCIM token helps enforce access control and security policies in Apple Business Manager. By integrating with an identity provider, organizations can centrally manage user access rights, roles, and permissions. When users' roles or access privileges change in the identity provider, those changes can be automatically applied to their Apple Business Manager accounts through the SCIM token, ensuring that users have appropriate access to resources and data.
4. Efficiency and Consistency: The SCIM token automates the process of user management, reducing manual effort and increasing efficiency. Changes made in the identity provider are propagated to Apple Business Manager in near real-time, ensuring consistency across systems. This eliminates the need for manual user provisioning and deprovisioning, reducing the risk of errors and inconsistencies.

Overall, the SCIM token in Apple Business Manager enhances user management, simplifies access control, and improves security by integrating with an identity provider or identity management system. It streamlines the administration of Apple services within an organization, saving time and effort while maintaining a secure and consistent user experience.

[gabester]

In 2025 these steps seem to be accurate: 

1) Sign in to business.apple.com > User (bottom left corner) > Preferences
2) Under Managed Apple Account > Directory Sync > Edit (on right)
Note: Tenant URL = https://federation.apple.com/feeds/business/scim
Note: Token X expires on DATE
3) Under Client Secret Click +Client Secret and copy the new Client Secret
4) Go to https://entra.microsoft.com
5) In Entra Admin Center go to Applications > Enterprise Applications > Apple Business Manager

6) Select Provisioning from under Manage in the middle pane
7) On right bottom Manage Provisioning > Update Credentials
8) Select dropdown arrow under Admin Credentials
9) Paste in your Secret Token from step 3 above - old appears as • new will appear as ••••••••••••••••••••••• etc

10) CLICK SAVE then test your connection