Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
---
pcx_content_type: how-to
title: Provision with SCIM
updated: 2023-12-08
updated: 2024-12-04

---

By connecting a System for Cross-domain Identity Management (SCIM) provider, you can provision access to the Cloudflare dashboard on a per-user basis, through your identity provider (IdP)
By connecting a System for Cross-domain Identity Management (SCIM) provider, you can provision access to the Cloudflare dashboard on a per-user basis, through your identity provider (IdP).

Currently, we only provide SCIM support for Enterprise customers, and for Microsoft Entra and Okta. If you are interested in setting up SCIM support, contact your account team and ask for dashboard SCIM.
Currently, we only support SCIM connections for Enterprise customers using Okta or Microsoft Entra. If you are an Enterprise customer using Okta or Microsoft Entra, and you are interested in setting up SCIM support, follow the steps below.

## Limitations

Expand All @@ -17,7 +17,7 @@ Currently, we only provide SCIM support for Enterprise customers, and for Micros

## Prerequisites

- Cloudflare provisioning with SCIM is only available to Enterprise customers and requires a Cloudflare-specific feature flag. Contact your account team for more information.
- Cloudflare provisioning with SCIM is only available to Enterprise customers using Okta or Microsoft Entra.
- In Cloudflare, [Super Administrator](/fundamentals/setup/manage-members/roles/) access on the account.
- In your identity provider, the ability to create applications and groups.

Expand Down Expand Up @@ -141,4 +141,4 @@ Refer to the list of [Roles](/fundamentals/setup/manage-members/roles/) for more

:::note
To successfully provision with Microsoft Entra ID, the `user principal name` and `email` fields must match. These values are case-sensitive.
:::
:::
Loading