This document is a guide for Microsoft Entra administrators on how to create a Stable application. Once SCIM is configured, Entra and Stable will share the same user list, meaning that any updates made in Entra will automatically sync to Stable. This also allows users assigned to the Stable app in Entra to log in to the Stable Dashboard using SSO.

We’ll start by creating an application in Microsoft Entra. This lets you assign users to Stable and sync them automatically.

Go to the Entra admin center. After logging in, you should see a page like this:

Click on the Applications tab in the left menu, then go to Enterprise Applications. It should look like this — feel free to click on New application at the top

The following screens should pop up — click on Create your own application:

Fill out the required info, and select Integrate any other application you don't find in the gallery (Non-gallery). Click Create at the bottom:

Go back to the Enterprise Applications list and select the Stable app you just created. You’ll see this screen:

Let’s configure Single Sign-On. In the left navigation, click Single sign-on and choose SAML:

With the SAML settings page open, we’ll need to enter some values provided by Stable. After that, you’ll share some info back with us. You’ll need these three values from Stable:

Click the Edit pencil to input these:

Here is an example, with random data — you should get your organization data with our support:

After clicking save, you will be back to the screen below. Scroll down to gather the following info and send it to Stable:

Lastly, make sure the mappings are configured correctly. At Stable, we use the email attribute as the unique identifier.

We also support SCIM, which lets Entra automatically send user changes to Stable. Stable tracks the following user attributes:

Entra users have more attributes, but we only map these three:

You’ll find all the relevant attributes listed above. If you’d like to change the email attribute to something else, just make sure:

Open the application settings and click the Provisioning tab:

Click Connect your application:

Enter the following:

After filling this in, click Test connection. If all goes well, click Create at the bottom of the page:

You’ll land on this page:

Before starting provisioning, go to Attribute mapping (Preview) to set correct mappings. Disable Groups since Stable doesn’t support it

Click Users to update the attribute mappings, and adjust them to match what Stable supports. You’re free to change the mappings as needed — just make sure to follow the steps outlined here, and don’t forget to hit Save afterward.

Go back and activate provisioning clicking Start provisioning

It should look like this after activation:

You can also use Provision on demand to manually sync users to Stable without waiting for auto-provisioning.

Ensure the user is assigned to the Stable application. Click Add user/group, choose your user(s), and hit Assign.

Once assigned, wait for automatic provisioning or trigger it manually via Provision on demand.

Visit our Dashboard and enter your email. You’ll see the login prompt:

Note: Logging in via the Microsoft app launcher won’t work — you must go through our dashboard login.