Provisioning is a feature used to manage user information in Kintone using the Identity Provider (IdP) such as Azure Active Directory and Okta.
With provisioning enabled, user information in the IdP will be automatically propagated to Kintone.

When provisioning is enabled, the following items from IdP are propagated.

• Login Name
• Display Name
• Surname
• Given Name
• E-mail Address
• Available Services

Departments, Job Titles, and Groups (or Roles) will not be propagated.

1. Click in the header.

2. Click Users & System Administration.
   Accessing Kintone Users & System Administration

3. Click Provisioning.

4. Click Create API Token.

5. Select the validity period.

6. Enter notes for this API token.

7. Click Create.

8. An API token is created.
   

9. Register the API token and the SCIM Endpoint of Kintone with the IdP.
   Click the button to copy the API token.

10. Close the dialog.

11. Enable "Propagate Provisioning".

If "Propagate Provisioning" is disabled, user information in the IdP will no longer be propagated to Kintone.

1. Click Create API Token.

2. Select the validity period.

3. Enter notes for this API token.

4. Click Create.

5. An API token is created.
   

6. Register the API token of Kintone with the IdP.
   Click the button to copy the API token.

7. Close the dialog.

8. Disable the old API token.

9. Click Delete.

• If "Propagate Provisioning" is enabled, users cannot change their login names.
• You cannot synchronize "User available services" from Azure Active Directory.
• If you perform any of the following actions while "Propagate Provisioning" is enabled, you might encounter errors when propagating user information from IdP.
  • Delete users propagated from IdP in Kintone.
  • Add users to Kintone first, then add the users with the same user names (same login names) to IdP.
  • Change user names (login names) in Okta.