Overview
This article provides steps to resolve the error message "Provisioning has been quarantined. See quarantine details for more information." that appears in the Azure portal for the Druva inSync SCIM application.
Prerequisites
Before proceeding, ensure you have:
Administrative access to the Azure portal.
Necessary permissions to manage the Druva inSync SCIM application.
Scenario Description
If you receive an error stating "Provisioning has been quarantined. See quarantine details for more information." in the Azure portal for the Druva inSync SCIM application, it indicates that the provisioning service has encountered issues and has been temporarily paused. Common causes include network errors, expired tokens, or permissions issues.
Steps to Resolve the Quarantine Issue for SCIM Application
1. Log in to the Azure Portal:
Go to [Azure Portal](https://portal.azure.com).
Sign in with an account that has administrative access.
2. Navigate to the SCIM Application:
In the menu, select "Microsoft Entra ID."
Click on "Enterprise applications."
Select the SCIM application and click on it.
3. Check the Quarantine Status:
Go to the "Provisioning" tab.
Review the "Quarantine Status" to confirm the issue is related to token expiry.
4. Access the Druva inSync Console:
Log in to the Druva inSync Admin Console.
On the inSync Management Console menu bar, click Users > User Provisioning.
On the Summary section, click on the 3 dots in the top right corner and then click on the New Token option as shown below -
Copy the newly generated SCIM token.
5. Update the SCIM Token in Azure:
Return to the Azure Portal and the "Provisioning" tab of the Druva inSync SCIM Application.
Select Update credentials on the Provisioning page -
Under the Admin credentials section, the following Tenant URL should be already available - https://apis.druva.com/insync/scim
Paste the Secret Token - Enter the token that you generated on the inSync Management Console for SCIM-based user management -
Once the Tenant URL and Secret token are in place, click on the Test Connectivity in the top right corner, the test should be successful.
Click on Save.
The SCIM token is updated and this will be valid for 365 days from the token creation date.
Once the new SCIM token is generated, a new entry will be created automatically under Druva Cloud Settings > API Credentials page.