PHP App User Provisioning | SCIM Automated User Provisioning User Sync

SCIM - The System for Cross-domain Identity Management, allows automated SCIM user provisioning and also involves the process of creating, updating, and deleting user accounts in multiple applications and systems. It is an Identity and Access Management (IAM) solution that includes management and maintenance of an end user’s identity and user attributes in relation to accessing resources available in one or more systems.

SCIM enables automating the process of provisioning / de-provisioning of user identities, it involves the process of creating, updating, and deleting user accounts in multiple applications and systems. It is an Identity and Access Management (IAM) solution that includes management and maintenance of an end user’s identity and user attributes in relation to accessing resources available in one or more systems.

SCIM is a REST and JSON-based protocol that defines a client and server role. A client is usually an Identity provider (IDP), which contains user identities. A Service Provider (SP) is usually a SaaS app, like your PHP App, that needs a subset of information from those identities. When changes to identities are made in the IdP (Identity Provider), including create, update, and delete, they are automatically synced to the SP according to the SCIM protocol.

SCIM allows to communicate user’s data across different apps, this enables IT departments to automate the provisioning / de-provisioning process while also having a single system to manage permissions and groups. It mitigates the risks associated with employees using the same password across different tools and apps.It simplifies the user experience by automating the user identity lifecycle management process.