You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Settings** > **Authentication**.
9
11
10
-
2.Locate the IdP you want to synchronize and select **Edit**.
12
+
2.Find the {props.idp} integration and select **Edit**.
11
13
12
-
3.Select {props.one}.
14
+
3.Turn on **Enable SCIM**{props.and}**{props.supportgroups}**.
13
15
14
-
4. (Optional) Enable the following settings:
16
+
4. (Optional) Turn on the following settings:
15
17
16
-
***Enable user deprovisioning**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when they are removed from the SCIM application in the IdP. This will invalidate all active Access sessions and prompt for reauthentication for any Gateway WARP session policies.
17
-
***Remove user seat on deprovision**: [Remove a user's seat](/cloudflare-one/identity/users/seat-management/) from your Zero Trust account when they are removed from the SCIM application in the IdP.
18
-
***Enable group membership change reauthentication**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when their group membership changes in the IdP. This will invalidate all active Access sessions and prompt for reauthentication for any Gateway WARP session policies. Access will read the user's updated group membership when they reauthenticate.
18
+
***Enable user deprovisioning**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when they are removed from the SCIM application in {props.idp}. This will invalidate all active Access sessions and prompt for reauthentication for any Gateway WARP session policies.
19
+
***Remove user seat on deprovision**: [Remove a user's seat](/cloudflare-one/identity/users/seat-management/) from your Zero Trust account when they are removed from the SCIM application in {props.idp}.
20
+
***Enable group membership change reauthentication**: [Revoke a user's active session](/cloudflare-one/identity/users/session-management/#per-user) when their group membership changes in {props.idp}. This will invalidate all active Access sessions and prompt for reauthentication for any Gateway WARP session policies. Access will read the user's updated group membership when they reauthenticate.
19
21
20
22
5. Select **Save**.
21
23
22
-
6. Copy the **SCIM Endpoint** and **SCIM Secret**. You will need to enter these values into the IdP.
24
+
6. Copy the **SCIM Endpoint** and **SCIM Secret**. You will need to enter these values into {props.idp}.
23
25
24
26
The SCIM secret never expires, but you can manually regenerate the secret at any time.
0 commit comments