Skip to main content

​
System for Cross-domain Identity Management (SCIM)

This page covers the technical SCIM protocol details.⁠​​‌​‌​‌​‌​‌​‌​​​‌​‌​‌​‌‌⁠ To create SCIM mappings in the Cedar Admin Portal, see SCIM in the Admin Portal.
SCIM (System for Cross-domain Identity Management) is an open standard that allows for the automation of user provisioning. By configuring SCIM, your identity provider (IdP) can automatically create and update users and groups in Cedar.AI, and remove a departing user’s access, ensuring your user directory stays in sync with your organization’s central identity source. SCIM requires enrollment in Admin v2.

​
Supported Features

Cedar.AI supports the following SCIM 2.0 operations:
  • ServiceProviderConfig: Retrieve compliance and supported feature sets.
  • ResourceTypes: Discover supported resource schemas (Users, Groups).
  • Users:
    • Create: Provision new users.
    • Read: Retrieve user details or list users with filtering (e.g., by userName, email).
    • Update: Modify user attributes (e.g., displayName, active). Supports replace and add patch operations. Setting active to false removes the user from every group owned by the organization or carrier your SCIM connection is mapped to.
    • Delete: Remove the user from every group owned by the organization or carrier your SCIM connection is mapped to. The Cedar account stays active for any other company the person works with.
  • Groups:
    • Create: Create new groups.
    • Read: Retrieve group details or list groups with filtering (e.g., by displayName).
    • Update: Rename groups or update memberships (add/remove members).
    • Delete: Remove groups.

​
Getting Started

1

Create a SCIM mapping in the Admin Portal

Go to the Admin Portal SCIM page and create a mapping.⁠​​‌​‌​‌​‌​‌​‌​​​‌​‌​‌​‌‌⁠ You’ll get the Client ID and Client Secret needed for your identity provider.
2

Configure your identity provider

Use the guides below to set up SCIM in your identity provider using the credentials from the Admin Portal.
3

Test and monitor

After setup, monitor the Users page in the Admin Portal to verify provisioning is working.

​
Configuration Guides

Select your identity provider to view specific configuration instructions:

Microsoft Entra ID (Azure AD)

Configure SCIM with Azure AD

Admin Portal: SCIM

Create and manage SCIM mappings