What SCIM 2.0 provisioning is
SCIM is the System for Cross-domain Identity Management. It is an open standard for user provisioning. SenseCrypt exposes a SCIM 2.0 endpoint. Your identity source connects to this endpoint.
- SCIM 2.0 is an open provisioning standard.
- SenseCrypt acts as the SCIM service provider.
- Your directory acts as the SCIM client.
How SCIM provisioning works
Your identity source sends SCIM requests to SenseCrypt. SenseCrypt creates a user record for each new user. It updates the record when attributes change. It deactivates the record when a user leaves.
- Create a user with a POST request.
- Update attributes with a PATCH or PUT request.
- Deactivate a user with one call.
What you get
Automatic provisioning removes manual account work. Access stays in sync with your directory. Audit logs record each provisioning event.
- New users get access without manual steps.
- Former users lose access at once.
- Audit logs record each change.
How SCIM fits your stack
SenseCrypt pairs SCIM with a full standards set. It supports OIDC, OAuth 2.0, SAML 2.0, and CIBA. You provision users with SCIM first. The users then sign in by face login.
- Combine SCIM with OIDC or SAML single sign-on (SSO).
- Users sign in by face login after enrollment.
- Start a 30-day free trial, no card.
Frequently asked questions
Does SenseCrypt support SCIM 2.0?
Yes. SenseCrypt exposes a SCIM 2.0 endpoint. Your identity source provisions and deactivates users through it.
What can SCIM provisioning do?
It creates, updates, and deactivates user accounts. Your directory drives each change. Access stays in sync with your identity source.
Does SCIM replace single sign-on?
No. SCIM provisions the accounts. OIDC or SAML single sign-on (SSO) signs the user in. SenseCrypt supports both.
Related