SCIM

BirdCRM supports the System for Cross-domain Identity Management (SCIM) 2.0 to allow automated user lifecycle management from your identity provider. This feature works best alongside Single Sign On but can be used independently if required.

Setup Information

The following information is required to setup SCIM in your IdP. Where available, specific IdP setup instructions are provided as sub-pages (e.g. Okta).

Item	Value	Description

• If you setup SCIM without any roles or team-based assignments, any users you assign to the SCIM application will have their existing roles removed.

• This is due to the SCIM protocol sending an empty set of roles to BirdCRM which results in all roles for that user being removed.

• When setting up SCIM ensure that you have at least one user with the Owner role who you do not initially assign to the SCIM application.

Role Management

The roles custom attribute can be configured in your IdP to automatically provision one or more BirdCRM roles to a user being managed through SCIM. This can help you automatically manage your BirdCRM user base and access rights directly from your IdP.

Although the specific instructions will differ per IdP, the general settings are described in the table below:

Item	Value	Description

Team Management

An alternative method to manage automatic role assignment in BirdCRM through SCIM is to sync groups from your IdP to BirdCRM Teams.

Syncing groups from your IdP via the SCIM Groups Push feature will allow you to have Teams automatically created and team members managed completely from your IdP. T

hen within BirdCRM you can assign a role or multiple roles to the Team which will then apply to all members of the Team.

The screenshot below shows how to configure a role or roles for a Team in BirdCRM.

SCIM Access Key setup in BirdCRM

SCIM does not need to be explicitly enabled in your organization and is configured by setting up an Access Key in your BirdCRM org and using that in your identity provider. Besides the Access Key setup, all of the configuration is done via your IdP. Regardless of the IdP used, this step must be taken.

1. Navigate to the SCIM Settings page which is available here or by visiting Settings and clicking on the Security tab and then SCIM Settings.

2. Click on Add new access key and fill out a meaningful Name and Description and click Save.

3. You will then be presented with your Access Key. Make sure you take a copy and save it securely as you will not be able to view it again.

The access key is required for your IdP to authenticate to your BirdCRM organization.

Okta setup