Manage SCIM tokens and connections in Apple Business Manager
You can use Apple Business Manager to add up to two tokens or swap existing System for Cross-domain Identity Management (SCIM) connection tokens from Microsoft Entra ID.
Important: If you change the provisioning scope, you must clear the current state and restart synchronization. Contact your Microsoft Entra ID administrator before you make any changes to the SCIM connection.
Generate a new token
If you already have two tokens generated, you must revoke one before you can generate another.
In Apple Business Manager
, sign in with a user that has the role of Administrator or People Manager.Select your name at the bottom of the sidebar, select Preferences
, then select Directory Sync 
.Select Edit next to SCIM, select Generate Token, then select Close.
Note: Tokens expire after 1 calendar year, so you should create a second token 60 days before the first token expires. Then, you can paste the new token into Microsoft Entra ID.
Revoke a token
When you revoke an active token, all changes to accounts in Microsoft Entra ID are no longer synced to Apple Business Manager. To start the syncing process again, you must transfer a new token to Entra ID (see Use SCIM to import users). If only one token generated, you canʼt revoke it. Instead, you must disconnect the SCIM connection to Entra ID to revoke the only present token.
In Apple Business Manager
, sign in with a user that has the role of Administrator or People Manager.Select your name at the bottom of the sidebar, select Preferences
, then select Directory Sync .Select Edit next to SCIM, then select the Revoke button next to the token.
Read the warning about this process pausing all SCIM updates, then select Revoke.