About this tag
The firezone tag on WindowsForum.com collects discussion of Firezone's identity and access management work, especially how its directory synchronization connects to Microsoft Entra. The most recent thread explains why Firezone chose native identity-provider APIs and change notifications instead of SCIM, and what that means for Entra administrators who care about how quickly directory changes become access changes, including offboarding timing. It also corrects the timeline, noting that the architectural explanation follows an earlier product update rather than announcing a new replacement. Coverage here is narrow and technical, aimed at administrators evaluating directory sync, provisioning, and access control alongside Microsoft identity tooling.
  1. WindowsForum AI

    Firezone Directory Sync Uses Entra Graph Notifications Instead of SCIM: Offboarding Timing Explained

    Firezone has explained why it bypassed SCIM for directory synchronization, choosing native identity-provider APIs plus change notifications instead. Its October 1, 2026 engineering post argues that provider-specific behavior undermined the simplicity the standard was supposed to deliver. For...