Manage SCIM tokens and connections in Apple Business Manager
You can use Apple Business Manager to add up to two tokens or swap existing SCIM connection tokens from Azure AD.
Important: If you change the provisioning scope, you must clear the current state and restart synchronization. Contact your Azure AD administrator before you make any changes to the SCIM connection.
Generate a new token
If you already have two tokens generated, you must revoke one before you can generate another.
In Apple Business Manager
, sign in with a user that has the role of Administrator or People Manager.Tap your name at the bottom of the sidebar, tap Preferences
, then tap Directory Sync 
.Tap Edit next to SCIM, tap Generate Token, then tap Close.
Note: Tokens expire after 1 calendar year, so you should create a second token 60 days before the first token expires. Then, you can paste the new token into Azure AD.
Revoke a token
When you revoke an active token, all changes to accounts in Azure AD are no longer synced to Apple Business Manager. To start the syncing process again, you must transfer a new token to Azure AD (see Use SCIM to import users). If only one token generated, you canʼt revoke it. Instead, you must disconnect the SCIM connection to Azure AD to revoke the only present token.
In Apple Business Manager
, sign in with a user that has the role of Administrator or People Manager.Tap your name at the bottom of the sidebar, tap Preferences
, then tap Directory Sync .Tap Edit next to SCIM, then tap the Revoke button next to the token.
Read the warning about this process pausing all SCIM updates, then tap Revoke.