If you choose to scope who will be provisioned based solely on attributes of the user or group, you can use a scoping filter as described here. If you choose to scope who will be provisioned to your app based on assignment, you can use the following steps to assign users and groups to the application. The Azure AD provisioning service allows you to scope who will be provisioned based on assignment to the application and or based on attributes of the user / group. Define who will be in scope for provisioning

Learn more about adding an application from the gallery here. However it is recommended that you create a separate app when testing out the integration initially. If you have previously setup LanSchool Air for SSO, you can use the same application. Add LanSchool Air from the Azure AD application galleryДЄdd LanSchool Air from the Azure AD application gallery to start managing provisioning to LanSchool Air. The system generates a random secrete token. Configure LanSchool Air to support provisioning with Azure ADД¬lick on the menu at the top left then click Settings.Д¬lick Generate New. Determine what data to map between Azure AD and LanSchool Air.Determine who will be in scope for provisioning.Learn about how the provisioning service works.A user account in LanSchool Air with Admin permissions.A user account in Azure AD with permission to configure provisioning (for example, Application Administrator, Cloud Application administrator, Application Owner, or Global Administrator).The scenario outlined in this tutorial assumes that you already have the following prerequisites: Keep user attributes synchronized between Azure AD and LanSchool Air.Remove users in LanSchool Air when they do not require access anymore.

How to block lanschool