SCIM 2.0
Also known as: SCIM · System for Cross-domain Identity Management
Definition
SCIM 2.0 (System for Cross-domain Identity Management, RFC 7643 + 7644) is a standardized REST API for automated user and group provisioning across identity-aware applications.
SCIM defines a JSON-based REST API for managing identity resources. The core resources are User and Group; an Enterprise User extension adds attributes like manager, department, employee number. Operations include create, read, update (full PUT and partial PATCH), delete, and search via filter expressions.
In practice, SCIM is the bridge between your authoritative identity source (HRIS, IdP) and downstream SaaS apps. When a new hire starts in Workday, SCIM provisions their account in Slack, GitHub, Salesforce, etc. When they leave, SCIM deprovisions them.