Directory sync (SCIM)

Directory sync (SCIM) adds people to Fronko when you assign them in your identity provider, updates them when they change, and suspends or removes them when they leave. Groups can become teams. It’s on the Enterprise plan, and works with Microsoft Entra ID and other SCIM 2.0 providers.

Set it up with Microsoft Entra ID

1. In Fronko, open Integrations → Microsoft Entra ID (under Team Member Import), click Connect and save.
2. Click Generate token and copy it straight away; it’s shown only once. Note the Tenant URL.
3. In the Microsoft Entra admin center, open your Fronko enterprise application (or create a non-gallery one), go to Provisioning, set the mode to Automatic, and paste the Tenant URL and token. Click Test Connection and save.
4. Assign the people and groups who should be in Fronko, then turn provisioning on.

What happens to people

In your directory	In Fronko
Assigned to the app	An account is created as a member
Details change	Their email and name are updated
Unassigned or disabled	Suspended: they can’t sign in, and their cards and leads stay
Deleted	Their account is deleted; their cards, files and leads stay with the organisation

The owner can never be suspended or removed from the directory. Roles aren’t synced: everyone starts as a member and admins promote people in Fronko. Pair directory sync with single sign-on so people never need a Fronko password.

Generating a new token stops the old one working at once. Treat the token like an admin password.