SCIM groups

SCIM (System for Cross-domain Identity Management) is a REST-based service that automates user provisioning. SCIM groups are collections of users who share a role that requires specific access controls.

The SCIM Groups page displays:

  • The name and description of the SCIM group
  • The number of users who are mapped to the SCIM group
  • The number of mapped security roles.
  • Details of a SCIM groups and map security roles to the SCIM groups.

SCIM group structure and fields

The SCIM Agent is a component of the system. These read-only fields are provisioned by the SCIM Agent:

  • Name: SCIM group name.
  • Description: SCIM group description.
  • Users: Users assigned to the group.

Automatic association means that users joining an SCIM group automatically receive associated security roles and permissions. These fields are automatically associated with users in the SCIM group and can be added or removed:

  • Security Roles
  • Functional Security Roles
  • Accounting Entities
  • LN User Data Defaults Set
  • Groups
  • Locations
Note: These associations are now added to the respective tabs and can't be deleted in Users details on the Users page (select Manage > Users). You can delete associations only from the SCIM Groups details on the SCIM Groups page (select Manage > SCIM Groups). If you try to delete associations through the Users page, an error will be displayed.