Configuring SCIM for Flosum

Overview

Flosum supports System for Cross-domain Identity Management (SCIM). SCIM is an industry-standard protocol that lets you provision, manage, and deprovision users in your Flosum tenant through Flosum's SCIM API. This automation streamlines user management and ensures consistency across your identity provider and Flosum.

You can use JIT Provisioning as an alternative to SCIM, or combine the two. JIT Provisioning automatically creates and updates user accounts in Global Settings when users first log in via SSO. For more details, see the article below.

• Configuring Just-In-Time (JIT) Provisioning

Flosum's SCIM API

Flosum's SCIM API is based on SCIM 2.0, an open standard for cross-domain identity management. It supports the User resource type, allowing you to perform various user management operations programmatically.

Supported Actions

• Retrieve all users

• Create new users

• Update users

• Activate or deactivate users

• Delete users

Not Supported

You cannot change a user's group through the SCIM API. However, when adding an identity provider in Global Settings, you can set it to automatically assign new users to a specific group.

Flosum Username

In Flosum Cloud Apps, a user's email address serves as their username. When connecting an identity provider to Flosum's SCIM API, map the user's email address to the username attribute.

Supported Identity Providers

Flosum supports automated user provisioning with the following identity providers. The articles below provide step-by-step instructions for configuring them to work seamlessly with Flosum's SCIM API.

• Microsoft Entra ID - SCIM - Configuration

• Okta - SCIM - Configuration

• PingOne - SCIM - Configuration