Hello
We are implementing SCIM provisioning for Figma using Microsoft Entra ID with the new roles-based model.
Setup:
- Figma gallery app (new template)
- Custom attribute roles (multi-value)
- Mapping: AppRoleAssignmentsComplex([appRoleAssignments])
- App roles defined with values: Full, Dev, Collab, View
- Users are assigned to these roles (not Default Access)
Issue:
SCIM provisioning is working in the sense that users are created successfully in Figma, but the seat is not applied or updated based on the assigned role.
No matter which role (Full, Dev, Collab, View) is assigned, the user ends up with the same seat in Figma.
What we’ve checked:
- Users have explicit role assignments on the enterprise app
- Only one role per user during testing
- Mapping is set to “Apply always”
- No legacy SCIM schema is used
Question:
Is there anything specific required for Figma to accept the roles value from Entra, or a known issue where the seat is not updated even though SCIM succeeds? Is there something we have overlooked and can get some help on.
Thanks