--- title: "SCIM Settings" slug: "scim-settings" updated: 2025-06-26T21:10:50Z published: 2025-06-26T21:10:50Z canonical: "docs.processmaker.com/scim-settings" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.processmaker.com/llms.txt > Use this file to discover all available pages before exploring further. # SCIM Settings > [!TIP] > [**Plan Availability:**](https://www.processmaker.com/products/pricing/) ![Professional](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/Standard.png)![Professional](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/Professional.png)![Enterprise](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/Enterprise.png) ## What is SCIM? [System for Cross-domain Identity Management (SCIM)](http://www.simplecloud.info/), is an open standard to automate user provisioning. The SCIM specification is designed to more easily manage user identities in cloud-based applications, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. SCIM settings provide additional profile settings available to all user accounts. The SCIM specification is designed to more easily manage user identities in cloud-based applications. The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. As a cloud-based technology, ProcessMaker developed SCIM so users' identities can be created either directly in a tool like [Okta](https://www.okta.com/) or imported from external systems like HR software or [Active Directory](https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview). Since SCIM is a standard, user data is stored following a consistent protocol and can communicate across different apps. ### Purpose of the SCIM Base URL The SCIM base URL is set by default in ProcessMaker after the [SCIM setting is enabled](/v1/docs/scim-settings#enable-the-scim-setting). Copy the SCIM base URL to the SCIM provider's settings to synchronize user identities via SCIM. The SCIM base URL is set for your ProcessMaker instance as a redirected URL that cannot be edited. ### Obtaining a Bearer Token In addition to the SCIM Base URL, a bearer token is also required to access ProcessMaker's SCIM endpoints. Follow the instructions for [managing API tokens for users](/v1/docs/edit-a-user-account#manage-api-tokens-for-the-user) to obtain a bearer token for your user account and copy it to your SCIM provider's settings. This user account must also have the user permissions detailed in the [Enable the SCIM Settings](/v1/docs/scim-settings#enable-the-scim-setting) section. ### Configure the User Status in Microsoft Entra To ensure that user status updates to Active or Inactive in ProcessMaker based on the Account Enabled value in Microsoft Entra ID, the 'active' attribute in the application column must include the following values in its properties: Follow the instructions in [Editing user attribute-mappings](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/customize-application-attributes#editing-user-attribute-mappings): - Add the expression `Switch([lsSoftDeleted], , “False“, “1“, “True“, “0“)` - Set the **Default value if null** setting to **true** ![](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/Microsoft Entra - Update User Expression.png) --- ### Enable the SCIM Setting **Permissions** Your user account or group membership must have the "[Settings: View Settings](/v1/docs/permission-descriptions-for-users-and-groups#settings)" permission to enable SCIM settings unless your user account has the **Make this user a Super Admin** setting selected. If your user account does not have the **Make this user a Super Admin** option selected, the following additional permissions are required to successfully access ProcessMaker's SCIM endpoints: - **Users** category: [Create Users, Delete Users, Edit Users, View Users.](/v1/docs/permission-descriptions-for-users-and-groups#users) - **Groups** category: [Create Groups, Delete Groups, Edit Groups, View Groups.](/v1/docs/permission-descriptions-for-users-and-groups#groups) See [user permissions](/v1/docs/edit-a-user-account#edit-user-permissions)/[group permissions](/v1/docs/edit-a-group#edit-group-permissions) or ask your Administrator for assistance. Follow these steps to enable the [SCIM](/v1/docs/scim-settings#what-is-scim) setting: 1. Ensure that you are [logged on](/v1/docs/participant-basics#log-on-to-processmaker-platform) to ProcessMaker Platform. 2. Click the **Admin** option from the top menu. The **Users** page displays. 3. Click the **Settings** icon ![](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/9627ad2d-5e76-4e55-92e2-80badbbf9f4a.png) from the left sidebar to view all settings. 4. From the **Settings** panel on the left, expand the **Log-in & Auth** section. 5. Select **SCIM** to view the following details: - **Setting:** The **Setting** column displays the SCIM Setting name. - **Configuration:** The **Configuration** column displays the setting value and how it is configured. ![](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/436e0fa8-fd93-4bac-a1b0-90c2cb837cb2.png) SCIM base URL in the "SCIM" tab within the "Settings" page 6. Enable the **SCIM** toggle key in the **Configuration** column. The SCIM base URL displays beside the **SCIM Base URL** setting to copy into clipboard for inclusion into your SCIM provider's settings. The SCIM base URL is set for your ProcessMaker Platform instance as a redirected URL that cannot be edited. 7. Obtain a bearer token for your user account and copy it into your SCIM provider's settings. > [!NOTE] > #### Copy the SCIM Base URL > > > > Click the **Copy to Clipboard** icon ![](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/9c2347eb-9488-4123-99e6-5c5ecb66cce4.png) to copy the URL for inclusion into your SCIM provider's settings. > > Both the **Edit** icon ![](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/9a12d2ee-d490-4730-bbeb-6363cf245cdf.png) and the **Delete** icon ![](https://cdn.document360.io/2d311614-fcb7-4424-8b4c-d4d3091eebeb/Images/Documentation/019ac5cd-2e21-49f2-b06e-670a8b04708b.png) are deactivated in SCIM. The SCIM base URL is set for your ProcessMaker Platform instance as a redirected URL that cannot be edited.