New Feature
Security
Until now, bringing users in from Microsoft Entra ID meant a choice: a service account that can read every user and group, or registering cards at the printer. With release 2026.10.01, YSoft SAFEQ Cloud Pro takes users and groups, with their cards and PINs, straight from Entra ID through SCIM. You decide who is shared.
🔑 No service account needed
That means one less permanent login with access to your whole directory, and fewer questions in a security review. You choose which users and groups Entra ID sends to SAFEQ Cloud, and nothing else is shared.
🪪 New starters print on day one
A new user's account can be ready in SAFEQ Cloud before their first day, with their card number and PIN. Nobody registers a card at the printer.
🚪 Leavers lose access when they leave
Disable or delete someone in Entra ID, and SAFEQ Cloud disables them too, with their card, without anyone having to remember. Deletion follows Entra ID, so no old accounts are left behind.
🔄 Change it once, in Entra ID
Update users and groups in Entra ID, and the changes follow automatically, such as a new department or home folder. No need to do it twice. Every change is recorded in the SAFEQ Cloud audit log.
🛠️ Setting it up
Your IT team sets up SCIM once in Microsoft Entra ID. Your partner can help you plan it. Read more in the SAFEQ Cloud documentation: About SCIM · Microsoft Entra authentication.
SCIM is part of YSoft SAFEQ Cloud Pro and works with Microsoft Entra ID and OIDC sign-in. With Microsoft Entra ID Free, you assign users one by one. Assigning groups needs Entra ID P1 or higher. SCIM manages who has an account; it is not single sign-on.
New Feature
