You have an Azure subscription.

The SC-300 Exam Ref and official Microsoft Learn module “Plan and implement user provisioning” confirm that automatic user provisioning between Microsoft Entra ID (formerly Azure AD) and external SaaS applications uses the System for Cross-domain Identity Management (SCIM) 2.0 protocol.

SCIM 2.0 is an open standard that simplifies identity lifecycle management — enabling automatic creation, update, and removal of user accounts within connected SaaS applications. When a SaaS app supports SCIM 2.0, Entra ID can automatically synchronize user identities and attributes based on defined mappings.

Other protocols listed, such as WS-Fed, LDAP, or OAuth 2.0, serve different purposes — authentication and directory access rather than provisioning. WS-Fed is used for federated authentication; LDAP provides directory querying; OAuth 2.0 handles delegated authorization for resource access.

Thus, any enterprise SaaS app that supports automatic provisioning from Entra ID must implement SCIM 2.0 as per Microsoft’s integration requirements.