What is SCIM?
Understand what System for Cross-domain Identity Management (SCIM) is and how it applies to more easily manage users' identities.
Overview
Part of the Auth package, System for Cross-domain Identity Management (SCIM), is an open standard to automate user provisioning. The SCIM specification is designed to more easily manage user identities in cloud-based applications, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. SCIM settings provide additional profile settings available to all user accounts.
The SCIM specification is designed to more easily manage user identities in cloud-based applications. The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models.
As a cloud-based technology, ProcessMaker developed SCIM so users' identities can be created either directly in a tool like Okta or imported from external systems like HR software or Active Directory. Since SCIM is a standard, user data is stored following a consistent protocol and can communicate across different apps.
![](https://docs.processmaker.com/~gitbook/image?url=https%3A%2F%2Fcontent.gitbook.com%2Fcontent%2FkUTG8hlbL6K7ro1gfKkH%2Fblobs%2F1K1cqWw6qbTMfIcyvzfb%2FView%2520SCIM%2520Settings%2520-%2520Admin.png&width=768&dpr=4&quality=100&sign=1a82bf76&sv=1)
Purpose of the SCIM Base URL
The SCIM base URL is set by default in ProcessMaker after the SCIM setting is enabled. Copy the SCIM base URL to the SCIM provider's settings to synchronize user identities via SCIM. The SCIM base URL is set for your ProcessMaker instance as a redirected URL that cannot be edited.
Obtaining a Bearer Token
In addition to the SCIM Base URL, a bearer token is also required to access ProcessMaker's SCIM endpoints. Follow the instructions for managing API tokens for users to obtain a bearer token for your user account and copy it to your SCIM provider's settings. This user account must also have the user permissions detailed in the Enable the SCIM Settings section.