SCIMprovisjonering

SCIMprovisjonering, also known as SCIM provisioning, is the automation of creating, updating, and removing user accounts and groups across multiple IT systems using the System for Cross-domain Identity Management (SCIM) standard. It aims to streamline the lifecycle of digital identities and reduce manual administration by synchronizing identity data between an identity provider and downstream applications and services.

SCIM 2.0 is the widely adopted version, defined by RFC 7643 (core schema) and RFC 7644 (protocol) published by the IETF. SCIM exposes RESTful resources such as Users and Groups, using JSON payloads and a defined schema. Operations include create, read, update, delete (CRUD), as well as search and delta synchronization. Some implementations support a Bulk endpoint for batch provisioning.

In a typical deployment, an identity provider stores authoritative user data and pushes changes to target applications via SCIM endpoints. Provisioning rules map IdP attributes to SCIM attributes; deprovisioning ensures removal of access when a user leaves. Authentication uses tokens (usually OAuth 2.0 Bearer tokens), and transport security relies on TLS.

SCIM provisioning is widely used to automate onboarding and offboarding of users in cloud services (SaaS apps, collaboration platforms, HR systems) and to maintain consistent access rights across systems. Major identity providers and many SaaS applications offer SCIM compatibility, enabling streamlined lifecycle management, centralized governance, and auditable change tracking.