Transition from SCIM to AIM

[DavidRobinson]

We're in the process of transitioning our Azure Databricks instance from SCIM-based provisioning to Automated Identity Management (AIM), now that AIM is generally available. Once enabled, AIM becomes the authoritative source for managing users, groups, and service principals. We're interested in hearing whether others have experienced any issues reconciling identity records between AIM and SCIM during this transition.

Our Databricks account team has indicated that the migration should be seamless, and we've opened a support case with Microsoft to dig deeper—so far, it hasn't yielded any actionable insights.

[nayan_wylde]

@DavidRobinson Let me know how it goes. This is in my to-do list too as we are facing a lot of issues with SCIM like nested group sync and SPN syncs. One of the issue that I can think of is AIM respects nested groups from Entra, which SCIM didn’t. So after the switch, some folks might suddenly have more (or less) access than before. Worth double-checking your critical groups.