SCIM provisioning

SCIM (System for Cross-domain Identity Management) is an open standard protocol that automates how user identities are created, updated, and removed across different applications. When integrated with Document360, SCIM allows your Identity Provider to automatically sync users, readers, and groups — eliminating the need for manual account management.

How SCIM simplifies user management

In most organizations, managing user access across multiple platforms is time-consuming and error-prone. Administrators have to manually add new employees and remember to remove access when someone leaves. SCIM eliminates all of this.

With SCIM enabled in Document360, your Identity Provider handles this automatically. Any change you make in your IdP syncs to Document360 right away.

• When a new employee joins, simply add them to your IdP and their account is automatically created across all connected applications, including Document360.
• When someone leaves the organization, their access across all connected applications, including Document360, is revoked automatically.

This keeps your user access accurate, secure, and always up to date, without any extra effort from your administrators.

Depending on your IdP, SCIM provisioning in Document360 lets you manage the following directly from your IdP:

• Users — Automatically provision and manage users in Document360.
• Readers — Provision reader accounts and control their content access.
• Groups — Create and sync user and reader groups for streamlined permission management.

How SCIM determines user roles

When SCIM provisions a user to Document360, it uses the isTeamAccount attribute to determine whether the person should be provisioned as a User or a Reader.

This attribute is configured in your Identity Provider as part of the attribute mapping setup. You can set it manually per user, or use your IdP's Expression Builder to automatically assign it based on an existing attribute such as Job Title or Group membership.

SCIM capabilities by provider

SCIM provisioning in Document360 is set up as part of your SSO configuration. The capabilities available depend on your Identity Provider.

Configure SCIM with your Identity Provider

Select your Identity Provider below to get started.

SAML

OpenID Connect