This guide describes step by step how to configure SCIM provisioning between Microsoft Entra ID (Azure AD) and ActiveCampaign via the KoppelHet platform.

📋 Requirements

Ensure that you have:

• Microsoft Entra ID administrator access (at least Application Administrator)

• ActiveCampaign administrator account with API access

• KoppelHet platform access with integration management rights

🎯 Overview

With this integration you can:

• ✅ Automatically provision users from Entra ID to ActiveCampaign

• ✅ Synchronise users in real-time

• ✅ Apply role-based access control

• ✅ Deactivate or delete users

🔑 Required data

Microsoft Entra ID

• SCIM endpoint URL of your KoppelHet instance

• SCIM endpoint secret token

ActiveCampaign

• Account domain/ID: your ActiveCampaign account identification

• API key: for authentication with the ActiveCampaign API

1️⃣ Set up ActiveCampaign API access

1.1 Retrieve API key

1. Log in to your ActiveCampaign administrator account

2. Go to Settings → Developer

3. Copy your API key and save it securely

1.2 Find Account Domain/ID

The domain is in the format:

https://[jouw-domein].api-us1.com

2️⃣ Configure KoppelHet platform

2.1 Create integration

1. Log in to the KoppelHet platform

2. Go to Integrations

3. Select “Entra – ActiveCampaign”

4. Click Add Integration

2.2 Fill in ActiveCampaign settings

Account domain

[your domain] Domain from step 1.2

API key[your API key] Key from step 1.1

Default role[select role]Role for newly provisioned users

2.3 Role mappings

Entra roleActiveCampaign roleAccessAdminAdminFull accessUser AdministratorManagerUser managementUserUserBasic rights

2.4 Activate integration

1. Check the settings

2. Click Activate Integration

3. Copy the SCIM endpoint URL and the secret token for step 3

3️⃣ Configure Microsoft Entra ID

3.1 Create SCIM application

1. Sign in at entra.microsoft.com

2. Go to Identity → Applications → Enterprise applications

3. Click + New application → + Create your own application

4. Name: Joinly ActiveCampaign SCIM Provisioning

5. Select Non-gallery and click Create

3.2 Set up SCIM provisioning

Tenant URL [SCIM endpoint URL from step 2.4]

Secret Token[SCIM secret token from step 2.4]

• Click Test Connection (HTTP 200 OK = successful)

• Click Create

3.3 User and group assignment

1. Go to Users and groups

2. Assign test users or groups

3. Ensure assigned roles match the role mappings

3.4 Attribute mapping

Enable Create, Update and Delete actions and save.

3.5 Test provisioning

1. Go to Provision on-demand

2. Search for a test user

3. Click Provision and check the logs

3.6 Provisioning settings

• Enable notifications on failure

• Set a threshold for accidental deletions

• Turn on Provisioning status

3.7 Start service

Click Start provisioning and check the synchronization logs.

4️⃣ Verification and testing

• Test new user: create a test user in Entra ID and check after ±40 minutes in ActiveCampaign.

• Test updates: change an attribute in Entra ID and verify it is applied.

• Test deactivation: deactivate a user and check the status in ActiveCampaign.

📊 Monitoring & problem solving

• Check Provisioning logs, Audit logs and Error reports in Entra ID.

• Common issues:

  • ❌ Connection failed → check SCIM URL and token

  • ❌ No synchronization → check assignments and attributes

  • ❌ Role issues → verify role names and rights

  • ❌ API limits → check ActiveCampaign API usage