User Lifecycle Management (SCIM)

Until now, bringing users in from Microsoft Entra ID meant a choice: a service account that can read every user and group, or registering cards at the printer. With release 2026.10.01, YSoft SAFEQ Cloud Pro takes users and groups, with their cards and PINs, straight from Entra ID through SCIM. You decide who is shared.

🔑 No service account needed

That means one less permanent login with access to your whole directory, and fewer questions in a security review. You choose which users and groups Entra ID sends to SAFEQ Cloud, and nothing else is shared.

🪪 New starters print on day one

A new user's account can be ready in SAFEQ Cloud before their first day, with their card number and PIN. Nobody registers a card at the printer.

🚪 Leavers lose access when they leave

Disable or delete someone in Entra ID, and SAFEQ Cloud disables them too, with their card, without anyone having to remember. Deletion follows Entra ID, so no old accounts are left behind.

🔄 Change it once, in Entra ID

Update users and groups in Entra ID, and the changes follow automatically, such as a new department or home folder. No need to do it twice. Every change is recorded in the SAFEQ Cloud audit log.

🛠️ Setting it up

Your IT team sets up SCIM once in Microsoft Entra ID. Your partner can help you plan it. Read more in the SAFEQ Cloud documentation: About SCIM · Microsoft Entra authentication.