---
title: "POST /api/v1/secret-syncs/azure-entra-id-scim"
method: POST
path: "/api/v1/secret-syncs/azure-entra-id-scim"
tags: ["Secret Syncs"]
---

# POST /api/v1/secret-syncs/azure-entra-id-scim

`POST /api/v1/secret-syncs/azure-entra-id-scim`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/secret-syncs/azure-entra-id-scim`
- Auth: none declared

Create an Azure Entra ID SCIM Sync for the specified project environment.

## Request body

- object
  - `name` string, required: The name of the Azure Entra ID SCIM Sync to create. Must be slug-friendly.
  - `projectId` string, required: The ID of the project to create the sync in.
  - `description` string, nullable: An optional description for the Azure Entra ID SCIM Sync.
  - `connectionId` string, uuid, required: The ID of the Azure Entra ID Connection to use for syncing.
  - `environment` string, required: The slug of the project environment to sync secrets from.
  - `secretPath` string, required: The folder path to sync secrets from.
  - `isAutoSyncEnabled` boolean: Whether secrets should be automatically synced when changes occur at the source location or not.
  - `syncOptions` object, required: Optional parameters to modify how secrets are synced.
    - `initialSyncBehavior` 'overwrite-destination', required: Specify how Infisical should resolve the initial sync to the Azure Entra ID SCIM destination.
    - `keySchema` string: Not supported for Azure Entra ID SCIM syncs.
    - `disableSecretDeletion` false: Not supported for Azure Entra ID SCIM syncs.
    - `includeAllSubFolders` boolean: Whether to sync secrets from folders beneath the source path as well.
    - `secretKey` string, required: The key of the Infisical secret whose value will be used as the SCIM provisioning token.
  - `destinationConfig` object, required
    - `servicePrincipalId` string, uuid, required: The Object ID of the Azure Entra ID Enterprise Application service principal to sync the SCIM token to.
    - `servicePrincipalDisplayName` string: The display name of the Azure Entra ID Enterprise Application service principal.

## Response `200`

Default Response

- object
  - `secretSync` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `isAutoSyncEnabled` boolean
    - `version` number
    - `projectId` string, required
    - `folderId` string, uuid, nullable
    - `connectionId` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `syncStatus` string, nullable
    - `lastSyncJobId` string, nullable
    - `lastSyncMessage` string, nullable
    - `lastSyncedAt` string, date-time, nullable
    - `importStatus` string, nullable
    - `lastImportJobId` string, nullable
    - `lastImportMessage` string, nullable
    - `lastImportedAt` string, date-time, nullable
    - `removeStatus` string, nullable
    - `lastRemoveJobId` string, nullable
    - `lastRemoveMessage` string, nullable
    - `lastRemovedAt` string, date-time, nullable
    - `syncOptions` object, required: Optional parameters to modify how secrets are synced.
      - `initialSyncBehavior` 'overwrite-destination', required: Specify how Infisical should resolve the initial sync to the Azure Entra ID SCIM destination.
      - `keySchema` string: Not supported for Azure Entra ID SCIM syncs.
      - `disableSecretDeletion` false: Not supported for Azure Entra ID SCIM syncs.
      - `includeAllSubFolders` boolean: Whether to sync secrets from folders beneath the source path as well.
      - `secretId` string, uuid: The ID of the Infisical secret whose value will be used as the SCIM provisioning token.
    - `connection` object, required
      - `app` 'azure-entra-id', required
      - `name` string, required
      - `id` string, uuid, required
    - `environment` object, nullable, required
      - `slug` string, required
      - `name` string, required
      - `id` string, uuid, required
    - `folder` object, nullable, required
      - `id` string, required
      - `path` string, required
    - `destination` 'azure-entra-id-scim', required
    - `destinationConfig` object, required
      - `servicePrincipalId` string, uuid, required: The Object ID of the Azure Entra ID Enterprise Application service principal to sync the SCIM token to.
      - `servicePrincipalDisplayName` string: The display name of the Azure Entra ID Enterprise Application service principal.

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-09-19** `f66a96419240`: 2 info
  - added the new optional request property `syncOptions/includeAllSubFolders`
  - added the optional property `secretSync/syncOptions/includeAllSubFolders` to the response with the `200` status

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/secret-syncs/azure-entra-id-scim/post.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)