Skip to main content
SCIM lets an identity provider create, update, and deactivate workspace users automatically. Use SCIM when the organisation wants membership to follow its directory instead of manual invites.

​
Token setup

An admin creates a SCIM token in BehavIQ and adds it to the identity provider. Treat the token like a password. Store it in the identity provider only, and rotate it if it may have been exposed.

​
Rotation

Generating a new SCIM token rotates the provisioning secret. The old token stops working. Before rotating, make sure someone can update the identity provider configuration.

​
What SCIM changes

SCIM can create users, update profile details, assign membership, and deactivate users depending on the identity provider setup. SCIM does not replace SSO. SSO handles login. SCIM handles directory-driven membership.