Publishing date: June 2024
What is SCIM?
SCIM (System for Cross-domain Identity Management) is an open API standard for managing user identities. The standard is published under the IETF standards. Read more on https://scim.cloud/
How will you benefit from it?
Take full control over your personal data and eliminate any information security dependencies from your systems suppliers. SCIM standard integration with Wired Relations allows to import and manage all your users without having Wired Relations need to read files.
How can I activate this integration?
SCIM support is part of Wired Relations Enterprise subscription. Please get in touch with your representative in Customer Relations when you need to activate the SCIM Integration.
How does it work?
Wired Relations supports SCIM provisioning as a way to synchronise users and groups between the customers’ identity management system and Wired Relations. Wired Relations SCIM implementations work seamlessly together with all major identity providers e.g. Microsoft Entra ID, Google Workspace, Okta etc.
SCIM stands for System for Cross-domain Identity Management. It's a powerful open standard that aims to make life easier when it comes to managing user identities across different systems and applications. Here's the core idea:
-
Standardisation: SCIM provides a common language and structure for representing users and groups (like employees, contractors, etc.). This includes things like usernames, email addresses, and roles.
-
Automation: SCIM defines a RESTful API for performing actions on these identities. Think creating new user accounts, updating user information, deactivating old accounts – all done automatically.
Why does SCIM matter?
-
Simplified User Provisioning & Deprovisioning: When a new employee joins, instead of an IT admin manually creating accounts in multiple apps, SCIM lets systems talk to each other. The employee's record in your HR system can trigger the creation of accounts in everything from email to project management to cloud storage. When they leave, SCIM handles the deactivation process, ensuring security.
-
Reduced IT Workload: SCIM eliminates a lot of the repetitive, time-consuming work of user management. This frees up your IT team to focus on more strategic tasks.
-
Improved Security: Automating identity management with SCIM reduces the chance of human error. No more orphaned accounts lingering with access they shouldn't have, a big security risk!
-
Enhanced User Experience: Users don't have to remember a dozen passwords. With SCIM working hand-in-hand with identity providers, you can streamline things like single sign-on (SSO).
Real-World Use Cases
-
Cloud Service Providers: Many SaaS platforms (Dropbox, Slack, etc.) have SCIM endpoints, meaning you can control access directly from your chosen identity provider (Okta, Entra ID, etc.).
-
Large Enterprises: With potentially thousands of employees and multiple systems, SCIM is a lifesaver for managing user identities at scale.
-
Organisations with high security needs: SCIM helps ensure consistent access control and tightens security.
Technical Notes
-
Data Format: SCIM heavily uses JSON for data exchange, a lightweight and easily understood format for web systems.
-
REST API: SCIM operations are carried out using REST API calls (create, update, delete, etc.), meaning it fits seamlessly into modern IT infrastructures.
Wired Relations SCIM setup
SCIM URL: https://scim.wiredrelations.com/v2
Secret token to be acquired from Connection Hub → SCIM
Entra ID (non-default) mappings
-
Provision Microsoft Entra ID Users
Manage Users and Groups as appropriate
Both users and groups can be assigned a role within Wired Relations → User management
In case Group Managed Authorisation is enabled for your Wired Relations tenant, then a group for each role has already been created. Assigning a user to one of these groups in SCIM will assign the user as a member of given group within Wired Relations.
