Skip to content

Commit 68cdaf5

Browse files
authored
[Fundamentals and ZT] Added notes about SCIM provisioning (#21689)
* Added notes about SCIM provisioning * Updated noted
1 parent 150d998 commit 68cdaf5

File tree

2 files changed

+8
-7
lines changed
  • src/content/docs

2 files changed

+8
-7
lines changed

src/content/docs/cloudflare-one/identity/users/scim.mdx

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,12 @@ import { Render } from "~/components"
1010

1111
System for Cross-domain Identity Management (SCIM) is an open standard protocol that allows identity providers to synchronize user identity information with cloud applications and services. After configuring SCIM, user identities that you create, edit, or delete in the identity provider are automatically updated across all supported applications. This makes it easier for IT admins to onboard new users, update their groups and permissions, and revoke access in the event of an employee termination or security breach.
1212

13+
:::note
14+
This section covers SCIM provisioning for Cloudflare Zero Trust only. To provision access to your Cloudflare account, you will need to set up a distinct [dashboard SSO SCIM integration](/fundamentals/setup/account/account-security/scim-setup/) in your IdP. You can assign users and groups to this new SCIM application to define who can access the Cloudflare dashboard.
15+
16+
Users provisioned via the [Zero Trust SCIM integration](#sync-users-and-groups-in-zero-trust-policies) will not have access to your Cloudflare dashboard unless you have manually added them to your [Cloudflare dashboard SSO application](/cloudflare-one/applications/configure-apps/dash-sso-apps/).
17+
:::
18+
1319
## Supported identity providers
1420

1521
Cloudflare Access supports SCIM provisioning for all SAML and OIDC identity providers that use SCIM version 2.0.
@@ -20,8 +26,3 @@ Cloudflare Access can automatically deprovision users from Zero Trust after they
2026

2127
To set up SCIM for Zero Trust, refer to our [SSO integration](/cloudflare-one/identity/idp-integration/) guides.
2228

23-
## SCIM for Cloudflare dashboard SSO
24-
25-
To provision access to your Cloudflare account, you will need to set up a distinct [dashboard SSO SCIM integration](/fundamentals/setup/account/account-security/scim-setup/) in your IdP. You can assign users and groups to this new SCIM application to define who can access the Cloudflare dashboard.
26-
27-
Users provisioned via the [Zero Trust SCIM integration](#sync-users-and-groups-in-zero-trust-policies) will not have access to your Cloudflare dashboard unless you have manually added them to your [Cloudflare dashboard SSO application](/cloudflare-one/applications/configure-apps/dash-sso-apps/).

src/content/docs/fundamentals/setup/account/account-security/scim-setup.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
---
22
pcx_content_type: how-to
3-
title: Provision with SCIM
3+
title: Dashboard SCIM provisioning
44
updated: 2024-12-04
55

66
---
77

88
Cloudflare supports bulk provisioning of users into the Cloudflare dashboard by using the System for Cross-domain Identity Management (SCIM) protocol. This allows you to connect your external identity provider (IdP) to Cloudflare and quickly onboard and manage users and their permissions. Cloudflare supports SCIM onboarding with Okta and Microsoft Entra.
99

1010
:::note
11-
Cloudflare Zero Trust also supports SCIM for onboarding users to Cloudflare Access. [Learn more](/cloudflare-one/identity/users/scim/)
11+
This section covers SCIM provisioning for the Cloudflare dashboard only. If you need to provision SCIM for Cloudflare Zero Trust, refer to [Zero Trust SCIM provisioning](/cloudflare-one/identity/users/scim/).
1212
:::
1313

1414
## Limitations

0 commit comments

Comments
 (0)