Skip to content

Entra - Add License Assignment Docs #865

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
rexchoppers wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

Entra - Add License Assignment Docs #865

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
baf0d57
docs(scim): remove outdated Entra license assignment limitation note
rexchoppers Aug 14, 2026
21f65cc
docs(scim): remove outdated note that Entra doesn't support license a…
rexchoppers Aug 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 1 addition & 5 deletions src/content/docs/aws/organizations-admin/sso/scim/entra.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -149,8 +149,4 @@ The `409` is transient - Entra retries the failed operation on the next cycle, a

#### Last-Admin Protection

LocalStack will reject any SCIM request that would leave the workspace without an admin. If you attempt to remove the only admin from the admin role group, the request fails with `409 Cannot remove the last workspace admin`. Assign another admin in LocalStack first, then retry the removal.

:::note
License assignment via SCIM is not supported with Microsoft Entra ID. To assign licenses through SCIM, use [Okta](/aws/organizations-admin/sso/scim/okta/#license-management). Otherwise, manage license assignments directly in the LocalStack web app.
:::
LocalStack will reject any SCIM request that would leave the workspace without an admin. If you attempt to remove the only admin from the admin role group, the request fails with `409 Cannot remove the last workspace admin`. Assign another admin in LocalStack first, then retry the removal.
4 changes: 0 additions & 4 deletions src/content/docs/aws/organizations-admin/sso/scim/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,10 +18,6 @@ For IdP-specific setup instructions, see:
- [SCIM with Okta](/aws/organizations-admin/sso/scim/okta/)
- [SCIM with Microsoft Entra ID](/aws/organizations-admin/sso/scim/entra/)

:::note
License assignment via SCIM is currently supported with **Okta** only. Microsoft Entra ID supports user provisioning, deprovisioning, and role management, but not license assignment.
:::

## Prerequisites

- An active Enterprise subscription with the SCIM feature enabled
Expand Down