📋 Microsoft Entra Documentation Changes

title: Configure Configuring Velpic for for automatic user provisioning with Microsoft Entra ID

# Configure Configuring Velpic for for automatic user provisioning with Microsoft Entra ID

> You may also choose to enabled SAML-based Single Sign-On for Velpic, following the instructions provided in the [Azure portal](https://portal.azure.com). Single sign-on can be configured independently of automatic provisioning, though these two features complement each other.

## Guest billing in multitenant organizations

 

Guest billing only applies for users with a `userType` of `Guest`. External users, as defined in the [Microsoft Product Terms](https://www.microsoft.com/licensing/news/update-to-external-users-2024), should be labeled with a `userType` of `Guest` in Microsoft Entra ID. If licensed member users are brought into other organization tenants with a `userType` of `Member`, they don't accrue to the billing meter. If these users are brought in with a `userType` of `Guest`, they accrue to the meter. However, you can avoid being charged by setting up or joining a multitenant organization. If the guest user is from a participating organizational tenant, the guest doesn't accrue to the billing meter. For more information, see [Set up a multitenant org in Microsoft 365](/microsoft-365/enterprise/set-up-multi-tenant-org).

 

# Customer intent: As an IT administrator, I want to learn how to automatically provision and deprovision user accounts from Microsoft Entra ID to Ideo so that I can streamline the user management process and ensure that users have the appropriate access to Ideo.

1. Review the group attributes that are synchronized from Microsoft Entra ID to ideo in the **Attribute-Mapping** section. The attributes selected as **Matching** properties are used to match the groups in IDEO for update operations. Select the **Save** button to commit any changes.

1. Login to [Vonage admin portal](http://admin.vonage.com) with an admin user.

1. In the **Admin Credentials** section, select Authorize , make sure that you enter your Account Super User credentials, if it doesn't ask you to enter credentials make sure that you logged in with the Account Super User (you can check it http://admin.vonage.com/ on the upper left side, bellow your name you need to see "Account Super User"). Select **Test Connection** to ensure Microsoft Entra ID can connect to Vonage. If the connection fails , ensure your Vonage account has Admin permissions and try again.

1. If your identity provider isn't added to UNIFI , then login to UNIFI Portal as a **Company Admin**. Navigate to **Users -> Configure SSO -> add provider** button.

1. In the **Admin Credentials** section, enter your UNIFI **Tenant URL** -`https://licensing.inviewlabs.com/api/scim/v2/` and **Secret Token**. Select **Test Connection** to ensure Microsoft Entra ID can connect to UNIFI. If the connection fails , ensure your UNIFI account has Admin permissions and try again.

> > ```Example:

1. If you want to redirect your users to use Microsoft login page when they attempt to log in using H5mag's own system, you can set a SSO redirect on this page as well by selecting **Microsoft 365 / Microsoft Entra ID** in the SSO Provider options.

>Currently, when automatic user provisioning is configured, Microsoft Entra-only automatically de-provisions users and groups to Gtmhub and map users to their respective teams using the Microsoft Entra provisioning service.But in 2021 once SSO is enabled with Gtmhub,users are automatically provisioned when they log in through SSO and is assigned to their respective team.