SCIM
System for Cross-domain Identity Management. A REST-based protocol for automating user and group provisioning across identity providers and downstream applications.
SCIM is the reason enterprise buyers can turn on a SaaS tool without building a custom sync, and it is a hard requirement in most B2B procurement above a certain size. Implementations vary widely in practice: group handling, soft delete versus hard delete, and filtering support are where integrations break. Support PATCH, honor active: false as a deactivation, and paginate correctly.
See also: SCIM 2.0, what is SCIM, provisioning, set up SCIM provisioning recipe
Related on Start with Identity
- GlossaryDeprovisioning
Removing access when a user leaves or changes roles. Failed deprovisioning leaves orphaned accounts that auditors flag and attackers exploit. SCIM with HR-drive
- GlossaryIGA
Identity Governance and Administration. The discipline of managing who has access to what, why, and for how long. Covers access certification, segregation of du
- GlossaryJoiner-Mover-Leaver (JML)
The three lifecycle events that drive identity changes: new hires (joiner), internal transfers (mover), and departures (leaver). JML automation is a core IGA ca
- RankingBest Enterprise SSO & SCIM Platforms for B2B SaaS: Top 5
The best enterprise SSO and SCIM platforms for B2B SaaS in 2026: WorkOS, SSOJet, Auth0, FusionAuth, and Keycloak, ranked for teams that already have core auth a
- ArticleEnterprise Readiness for B2B SaaS: SSO, SCIM, and Audit Logs
The identity features that turn a B2B SaaS product into one enterprises will buy: SAML and OIDC single sign-on, SCIM provisioning, audit logs, role-based access
- GuideSCIM Provisioning Implementation Guide
A practical guide to implementing SCIM-based automated user provisioning and deprovisioning, covering the SCIM protocol, lifecycle management, vendor integratio