Summary
SCIM User Provisioning lets you automatically create and manage KnowledgeCity user accounts from your identity provider using the SCIM protocol. Once enabled, you retrieve a SCIM API URL and token to connect your identity provider, and you can control auto-licensing and logging behavior for provisioned users.
Introduction
SCIM (System for Cross-domain Identity Management) User Provisioning is part of the KnowledgeCity Integrations settings. It allows your identity provider to synchronize users into KnowledgeCity automatically, so accounts are created and kept up to date without manual entry.
This feature is intended for administrators who manage user access at scale. It solves the problem of manually onboarding and maintaining accounts by letting your directory act as the source of truth, reducing errors and keeping user access consistent as your organization changes.
Key Concepts
- SCIM is the open protocol used to provision and manage user accounts between your identity provider and KnowledgeCity.
- SCIM API URL is the endpoint your identity provider connects to in order to send provisioning requests to KnowledgeCity.
- SCIM token is the credential used to authenticate provisioning requests; treat it like a password and keep it secure.
- Auto-license is an option that controls whether provisioned users are automatically assigned a license when their accounts are created.
- Logging is an option that records provisioning activity so you can review and troubleshoot how users are being created and updated.
- Identity provider is the external directory or system that sends user data to KnowledgeCity through SCIM.
Steps to Follow
Open the Integrations settings
Sign in to KnowledgeCity as an administrator. From the Settings menu, select Integrations to open the integrations configuration area where user provisioning is managed.
Enable SCIM provisioning
Locate the SCIM provisioning option within the Integrations settings and turn it on. Enabling SCIM activates the provisioning endpoint so your identity provider can begin sending user data to KnowledgeCity.
Retrieve your SCIM API URL and token
After enabling SCIM, obtain the SCIM API URL and the SCIM token provided in the settings. You will enter these values in your identity provider's SCIM configuration so it can connect to KnowledgeCity. Copy the token carefully and store it securely, as it authenticates all provisioning requests.
Configure the auto-license option
Set the auto-license option according to how you want new accounts handled. When enabled, users provisioned through SCIM are automatically assigned a license as their accounts are created, so they are ready to access content without an extra manual step.
Configure the logging option
Set the logging option to control whether provisioning activity is recorded. Enabling logging gives you a record of the provisioning events, which is useful for confirming that users are being created and updated as expected and for troubleshooting any issues.
Connect your identity provider and verify
In your identity provider, enter the SCIM API URL and SCIM token in its provisioning configuration and enable provisioning to KnowledgeCity. Once connected, your identity provider will begin sending users automatically. Use the logging option to confirm that accounts are being provisioned correctly.
Conclusion
SCIM User Provisioning automates account creation and maintenance by connecting your identity provider to KnowledgeCity through the SCIM protocol. By enabling SCIM, sharing the SCIM API URL and token with your identity provider, and setting the auto-license and logging options, you can keep user access accurate and up to date with minimal manual effort.