Enforce SCIM provisioning
Prevent users from signing up on their own
Read time 2 minutesLast updated 13 days ago
To prevent users from signing up on their own, enforce SCIM provisioning. This configuration applies at the user level. As a result, users in your validated domains can't sign up using Just-in-Time (JIT) provisioning through Enterprise SSO, password-based authentication, or social authentication.
Enforcement applies to deprovisioning as well: users can't trigger the deletion of their own account, which leaves SCIM as the only way to deprovision an account in your validated domains.
Prerequisites
Before you enforce SCIM provisioning, ensure that you meet these prerequisites:
- You have enabled SCIM. Unity keeps SCIM provisioning enforcement unavailable until then.
- The configuration of your users is correct in your IdP.
If you enforce SCIM provisioning, Unity automatically enables SSO authentication enforcement, and keeps it turned on for as long as SCIM provisioning enforcement is in place.
Enforce SCIM provisioning
To enforce SCIM provisioning, complete these steps:
-
In the Unity Dashboard, open the Account menu and select Manage organization.
-
In the Administration menu, select SSO & SCIM.
-
On the SCIM Provisioning & Enforcement tab, under step 4, Enforce SCIM Provisioning, turn on the setting.The status changes from Not enforced to Enforced.
-
To check that your SCIM connection works, test syncs from your IdP.
Disable SCIM provisioning enforcement
To stop requiring SCIM provisioning, turn off Enforce SCIM Provisioning on the SCIM Provisioning & Enforcement tab. The users in your validated domains can then be provisioned and deprovisioned by other methods again.
Turning off SCIM provisioning enforcement doesn't disable SSO authentication enforcement, but it does let you disable it. To stop enforcing SSO authentication, turn it off on the Single Sign-on Enforcement tab.
Each of these actions also turns off SCIM provisioning enforcement:
- Turning off SCIM provisioning, under step 3 of the SCIM Provisioning & Enforcement tab
- Turning off Enterprise SSO