# Setting Up SCIM

Use SCIM to automate user provisioning from your identity provider into SureCloud.

SCIM stands for **System for Cross-domain Identity Management**.

It lets your identity provider create, update, and manage users in SureCloud more consistently.

SCIM is useful when you want to:

* reduce manual user administration
* keep user profiles in sync
* control access through your central identity platform
* support joiners, movers, and leavers more efficiently

### Supported providers

SureCloud currently supports SCIM setup guides for:

* **Microsoft Entra ID**
* **Okta**

Choose your provider to continue:

<table data-view="cards"><thead><tr><th>Provider</th><th data-card-target data-type="content-ref">Guide</th></tr></thead><tbody><tr><td>Set up SCIM provisioning with Microsoft Entra ID</td><td><a href="/spaces/p7T8DIv13tA4h2Y49bOp/pages/GGEbvD7tIXLdqWmqakGz">/spaces/p7T8DIv13tA4h2Y49bOp/pages/GGEbvD7tIXLdqWmqakGz</a></td></tr><tr><td>Set up SCIM provisioning with Okta</td><td><a href="/spaces/p7T8DIv13tA4h2Y49bOp/pages/9LORxPiNBucXEg4tzXmm">/spaces/p7T8DIv13tA4h2Y49bOp/pages/9LORxPiNBucXEg4tzXmm</a></td></tr></tbody></table>

### Before you start

SureCloud must enable SCIM for your tenant before you can complete the identity provider setup.

To request setup, send SureCloud Support the following:

* tenant location, if relevant
* tenant name
* tenant subdomain
* name and email address for the person who should receive the SCIM endpoint URL and secret token securely

### Request SCIM setup

Contact [SureCloud Support](mailto:success@surecloud.com) to request SCIM setup.

Include all required tenant and contact details in your request.

{% hint style="info" %}
Send the secure SCIM credentials only to the named contact for your organisation.
{% endhint %}

### What happens next

{% stepper %}
{% step %}

### SureCloud enables SCIM

We enable SCIM for your SureCloud tenant.
{% endstep %}

{% step %}

### We send your SCIM details

We send your SCIM endpoint URL, secret token, and SureCloud group details securely to your named contact.
{% endstep %}

{% step %}

### You configure your identity provider

Use the details we provide to complete the SCIM configuration in your identity provider.
{% endstep %}

{% step %}

### Test with a small group

Start with a test user or small pilot group before enabling wider provisioning.
{% endstep %}
{% endstepper %}

### Helpful to know

SCIM manages user provisioning. It does not replace SSO.

You will usually use SCIM and SSO together:

* **SCIM** manages users and group membership
* **SSO** manages sign-in


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://surecloud.gitbook.io/surecloud-docs/documentation/admin/setting-up-scim.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.