What is SCIM used for?
Last updated
Last updated
This section explains what SCIM is used for and how it helps organizations manage user identities automatically across systems.
SCIM focuses on user lifecycle management, not authentication.
This guide applies to:
Business and enterprise accounts
Organizations using an external Identity Provider (IdP)
Automated user provisioning and de-provisioning
SCIM is commonly used with:
Azure AD (Microsoft Entra ID)
Okta
Google Workspace
Other SCIM-compatible IdPs
Before using SCIM, ensure that:
You have a Business or Organization account
You have administrator privileges
You use an Identity Provider that supports SCIM
You can generate and store a SCIM access token securely
SCIM enables organizations to:
Automatically create users in applications
Update user profiles and attributes
Manage group membership and roles
Deactivate users when access is no longer required
SCIM works alongside OAuth 2.0 and OIDC but serves a different purpose.
Automated user provisioning
Automated user de-provisioning
Profile and attribute synchronization
Group and role management
Centralized identity governance
User sign-in or authentication
Password management
MFA verification
Token issuance
In your Identity Provider:
Enable SCIM provisioning
Select the application you want to integrate
Configure user and group provisioning options
In the platform:
Navigate to Organization Settings
Open Identity & Provisioning
Generate a SCIM access token
Store the token securely
This token authorizes your IdP to manage users.
In your IdP:
Enter the SCIM base URL provided by the platform
Paste the SCIM access token
Test the connection
Enable one or more of the following:
Create users
Update user attributes
Deactivate users
Sync groups and roles
Once enabled, changes in the IdP are automatically applied.
After setup:
New users are created automatically
Attribute changes are synced
Disabled users lose access immediately
No manual intervention is required.
SCIM follows the IdP as the source of truth
Manual changes in the application may be overwritten
De-provisioned users cannot sign in
SCIM events are logged for audit purposes
SCIM automates user lifecycle management
It reduces manual user administration
It improves security and compliance
It complements OAuth and OIDC authentication flows