SCIM 2.0 provisioning integration
Yes, for users. Personal Academy has a SCIM 2.0 endpoint that creates, updates and deactivates users from your identity provider, and lists groups. Deactivation removes memberships and roles at once and keeps the account row for the audit trail. It is included from the Basic plan. There are no discovery endpoints, no Bulk and no Group PATCH yet, and no identity provider has been tested end to end.
See pricing (from $1 per active user)
Included from the Basic plan, $1 per active user per month.
At a glance
Point your identity provider at the Personal Academy SCIM base URL with a bearer token created in the admin area. Users are matched by email.
| Status | Built, not yet verified |
|---|---|
| Included from | Basic plan |
| Authentication | SCIM bearer token |
| Data that flows | In: user create, update, deactivate; group listing. Out: SCIM user records |
| Not yet | ServiceProviderConfig, Schemas, ResourceTypes, Bulk, Group PATCH, an end-to-end identity provider test |
How to set it up
- Create a SCIM token in the Personal Academy admin area.
- Add the SCIM base URL and the token to your identity provider's provisioning settings.
- Provision one test user and confirm it appears in Personal Academy.
- Deactivate the test user and confirm the account loses access.
Highlights
- Create, update and deactivate users
- Deactivation removes memberships and roles immediately
- Included from the lowest paid plan
Technical overview
Authentication:SCIM 2.0 bearer token
Setup Time:~15 minutes
Prerequisites:
- •An identity provider that can send SCIM 2.0 requests.
- •The Basic plan or above.
Commands
Commands people use inside SCIM 2.0 provisioning. Replies shown are examples.
POST /api/scim/v2/UsersCreates a user when your identity provider assigns them.
HTTP 201 Created with the SCIM user record.
DELETE /api/scim/v2/Users/{id}Deprovisions a user: memberships and roles are removed; the account row is kept for audit.
HTTP 204 No Content.