Skip to content

Commit 860a621

Browse files
authored
Update enable-scim-on-dashboard.mdx
The user deprovision will actually hard revoke WARP. Not prompt for a re-auth
1 parent d8d2acf commit 860a621

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/partials/cloudflare-one/access/enable-scim-on-dashboard.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ import { Markdown } from "~/components"
1414

1515
4. (Optional) Configure the following settings:
1616

17-
* **Enable user deprovisioning**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when they are removed from the SCIM application in your IdP. This will invalidate all active Access sessions and prompt for reauthentication for any [WARP session policies](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/).
17+
* **Enable user deprovisioning**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when they are removed from the SCIM application in your IdP. This will revoke all active Access sessions and any WARP sessions.
1818

1919
If a user is deprovisioned via SCIM as a result of being disabled in your IdP, but then later re-enabled, Access will reactivate their SCIM user resource the next time they reauthenticate to Access or WARP. Reactivation will generate a [SCIM event log](/cloudflare-one/insights/logs/scim-logs/) and will only occur if **SCIM identity update behavior** is set to _Automatic identity updates_. As a result, if the user is disabled in your IdP in the future, they will be successfully deprovisioned.
2020
* **Remove user seat on deprovision**: [Remove a user's seat](/cloudflare-one/identity/users/seat-management/) from your Zero Trust account when they are removed from the SCIM application in your IdP.

0 commit comments

Comments
 (0)