SCIM (user provisioning)
A standard API that lets a company’s identity system create, update and remove user accounts in your SaaS automatically.
SSO lets employees log in; SCIM, defined in RFC 7644 (2015), keeps the account list in sync. When someone joins, Entra ID or Okta creates their account; when they leave, it is deactivated the same day, without anyone remembering to do it. Enterprise buyers ask for it in security questionnaires, often together with SSO.
Related terms
- SSO (single sign-on): Logging in once with a company account (Microsoft, Google, Okta) to use many apps, managed centrally by IT.
- Microsoft Entra ID (formerly Azure AD): Microsoft’s cloud identity service behind Microsoft 365 logins, renamed from Azure Active Directory in 2023.
- Multi-tenancy (multi-tenant SaaS): One application and one deploy serving many client companies, with each client’s data kept apart.
