SCIM Provisioning – Missing User Attributes

If users provisioned via SCIM do not contain all desired attributes (e.g. phone number, job title, or department), this is usually due to a mapping or synchronization issue between your identity source and Lemontaps.

This article helps you systematically identify and resolve the root cause.

Typical causes of missing attributes

Missing data can occur at several points in the process:

• The data does not exist in Microsoft Entra ID
• The data is not correctly mapped via SCIM
• The data reaches Lemontaps but is not properly assigned

Follow the steps below in order.

First check: Did the data reach Lemontaps?

In Lemontaps, you can see exactly which data has been transmitted.

Go to: Identity Provider → SCIM → Edit Mapping → User Schema Analyzer

Here you can view the incoming attributes for each user.

Example:

Take a look at the individual steps in our click guide.

Interpretation:

• Data missing here → Issue is on the Entra ID side
• Data present → Issue is in the Lemontaps mapping

Issue on the Entra ID side

Check: Is the mapping in Entra ID configured correctly?

For Lemontaps to receive the data, the SCIM mapping in Entra ID must be properly set up.

In Entra:
Go to Manage → All applications → “your application” → Provisioning → Attribute mapping → “Provision Microsoft Entra ID Users”

Check the mapping for “Users”:

Verify:

• Are all required attributes included in the mapping?
• If attributes are missing, you can add them at the bottom of the table via “Add New Mapping”

• Select the “Source attribute” and the corresponding “Target attribute” and click “OK”.

• Are the correct fields mapped (e.g. title → jobTitle, emails → mail)?
  

The left side shows the data from the source system (Azure On-Prem), while the right side shows the attributes in Entra ID. Only correctly mapped attributes are passed to Lemontaps.

Issue in the Lemontaps mapping

Check: Is the mapping in Lemontaps correct?

If the data is visible in the Schema Analyzer but does not appear in the user profile, the issue lies in the mapping on the Lemontaps side.

Go to SCIM setup in the Identity Provider overview → Edit Mapping

Check: Are the incoming attributes correctly assigned to the corresponding Lemontaps fields?

• e.g. email → emails, position → title

The left side shows the attributes in Lemontaps, while the right side shows the incoming SCIM attributes from Entra ID.

Reapply mapping (after changes)

If you have made changes to the mapping, you must apply them to all users.

Action: → Click “Reapply mapping”

This ensures that the updated mappings are applied to existing users.