Manage SCIM tokens and connections in Apple School Manager
You can use Apple School Manager to add up to two tokens or swap existing SCIM connection tokens from Azure AD.
Important: If you change the provisioning scope, you must clear the current state and restart synchronization. Contact your Azure AD administrator before you make any changes to the SCIM connection.
Generate a new token
If you already have two tokens generated, you must revoke one before you can generate another.
In Apple School Manager
, sign in with a user that has the role of Administrator, Site Manager, or People Manager.Tap your name at the bottom of the sidebar, tap Preferences
, then tap Directory Sync 
.Tap Edit next to SCIM, tap Generate Token, then tap Close.
Note: Tokens expire after 1 calendar year, so you should create a second token 60 days before the first token expires. Then, you can paste the new token into Azure AD.
Revoke a token
When you revoke an active token, all changes to accounts in Azure AD are no longer synced to Apple School Manager. To start the syncing process again, you must transfer a new token to Azure AD (see Use SCIM to import users). If only one token generated, you canʼt revoke it. Instead, you must disconnect the SCIM connection to Azure AD to revoke the only present token.
In Apple School Manager
, sign in with a user that has the role of Administrator, Site Manager, or People Manager.Tap your name at the bottom of the sidebar, tap Preferences
, then tap Directory Sync .Tap Edit next to SCIM, then tap the Revoke button next to the token.
Read the warning about this process pausing all SCIM updates, then tap Revoke.