Skip to content

Commit d8d2acf

Browse files
authored
Update src/content/partials/cloudflare-one/access/enable-scim-on-dashboard.mdx
1 parent ea14baa commit d8d2acf

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/partials/cloudflare-one/access/enable-scim-on-dashboard.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ import { Markdown } from "~/components"
1616

1717
* **Enable user deprovisioning**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when they are removed from the SCIM application in your IdP. This will invalidate all active Access sessions and prompt for reauthentication for any [WARP session policies](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/).
1818

19-
If a user is deprovisioned via SCIM as a result of being disabled in your IdP, but then later re-enabled, Access will reactivate their SCIM user resource. As a result, if the user is disabled in the future, they will be successfully deprovisioned.
19+
If a user is deprovisioned via SCIM as a result of being disabled in your IdP, but then later re-enabled, Access will reactivate their SCIM user resource the next time they reauthenticate to Access or WARP. Reactivation will generate a [SCIM event log](/cloudflare-one/insights/logs/scim-logs/) and will only occur if **SCIM identity update behavior** is set to _Automatic identity updates_. As a result, if the user is disabled in your IdP in the future, they will be successfully deprovisioned.
2020
* **Remove user seat on deprovision**: [Remove a user's seat](/cloudflare-one/identity/users/seat-management/) from your Zero Trust account when they are removed from the SCIM application in your IdP.
2121
* **SCIM identity update behavior**: Choose what happens in Zero Trust when the user's identity updates in your IdP.
2222
- _Automatic identity updates_: Automatically update the [User Registry identity](/cloudflare-one/insights/logs/users/) when your IdP sends an updated identity or group membership through SCIM. This identity is used for Gateway policies and WARP [device profiles](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/); Access will read the user's updated identity when they reauthenticate.

0 commit comments

Comments
 (0)