Enable SCIM provisioning of platform users from Entra ID. Support group membership and mapping to roles.