Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

System for Cross-Domain Identity Management (SCIM) is a standard protocol/API that allows users and groups to be automatically provisioned from identity provider that support SCIM, to your Atlassian applicationfor user provisioning. SCIM is now supported by most major identity providers, including but not limited to Azure AD, Okta, OneLogin etc. Kantega

SCIM is a REST-like protocol and works over HTTP(S). The identity provider sends provisioning instructions to registered applications whenever changes occur by calling REST endpoints in the provisioned application (e.g. Jira or Confluence). This can be far more efficient than client-initiated synchronization/snapshotting, as only actual changes need to be transmitted. SCIM is therefore especially recommended for large user directories.

Kantega SSO primarily supports SCIM version 2. The older SCIM v1.1 protocol (legacy protocol ) is only supported and tested for use with Okta's on-prem provisioning agent.In brief, SCIM works by having the identity provider send provisioning instructions to registered applications whenever changes occur. As such it can be a far more efficient way to synchronize users than connectors, as only actual changes need to be transmitted, rather than full snapshots of directory stateand SCIM v1.1 may also work for other v1.1 providers, we cannot guarantee it and do not officially support it.