> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cedarai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SCIM Overview

> Manage user provisioning and de-provisioning with SCIM.

# System for Cross-domain Identity Management (SCIM)

<Info>
  This page covers the **technical SCIM protocol details**. To create SCIM mappings in the Cedar Admin Portal, see [SCIM in the Admin Portal](/user-docs/admin/scim).
</Info>

```mermaid theme={null}
flowchart LR
    A[Identity Provider] -->|Push Users/Groups| B(Cedar.AI SCIM API)
    B -->|Provision| C[(Cedar.AI Users)]
    B -->|Sync Members| D[(Cedar.AI User Groups)]

    style A fill:#f9f,stroke:#333,stroke-width:2px,color:#000
    style B fill:#bbf,stroke:#333,stroke-width:2px,color:#000
    style C fill:#bfb,stroke:#333,stroke-width:2px,color:#000
    style D fill:#fbf,stroke:#333,stroke-width:2px,color:#000
```

SCIM (System for Cross-domain Identity Management) is an open standard that allows for the automation of user provisioning. By configuring SCIM, your identity provider (IdP) can automatically create, update, and deactivate users and groups in Cedar.AI, ensuring your user directory stays in sync with your organization's central identity source.

**SCIM requires enrollment in Admin v2.**

## Supported Features

Cedar.AI supports the following SCIM 2.0 operations:

* **ServiceProviderConfig**: Retrieve compliance and supported feature sets.
* **ResourceTypes**: Discover supported resource schemas (Users, Groups).
* **Users**:
  * **Create**: Provision new users.
  * **Read**: Retrieve user details or list users with filtering (e.g., by `userName`, `email`).
  * **Update**: Modify user attributes (e.g., `displayName`). Supports `replace` and `add` patch operations.
  * **Delete**: Deactivate users (soft delete).
* **Groups**:
  * **Create**: Create new groups.
  * **Read**: Retrieve group details or list groups with filtering (e.g., by `displayName`).
  * **Update**: Rename groups or update memberships (add/remove members).
  * **Delete**: Remove groups.

## Getting Started

<Steps>
  <Step title="Create a SCIM mapping in the Admin Portal">
    Go to the [Admin Portal SCIM page](/user-docs/admin/scim) and create a mapping. You'll get the **Client ID** and **Client Secret** needed for your identity provider.
  </Step>

  <Step title="Configure your identity provider">
    Use the guides below to set up SCIM in your identity provider using the credentials from the Admin Portal.
  </Step>

  <Step title="Test and monitor">
    After setup, monitor the [Users page](/user-docs/admin/users) in the Admin Portal to verify provisioning is working.
  </Step>
</Steps>

## Configuration Guides

Select your identity provider to view specific configuration instructions:

<CardGroup cols={2}>
  <Card title="Microsoft Entra ID (Azure AD)" href="/user-docs/sso/scim/azure" icon="microsoft">
    Configure SCIM with Azure AD
  </Card>

  <Card title="Admin Portal: SCIM" href="/user-docs/admin/scim" icon="gear">
    Create and manage SCIM mappings
  </Card>
</CardGroup>