WordPress – SCIM User Provisioning

User Provisioning and Deprovisioning involves the process of creating, updating, and deleting user accounts in multiple applications and systems. It is an Identity and Access Management (IAM) solution that includes management and maintenance of an end user’s identity and user attributes in relation to accessing resources available in one or more systems.

The System for Cross-domain Identity Management (SCIM), is an open standard that allows for the automation of user provisioning. In other words, SCIM manages user identity information by syncing user information across different systems and applications. The goal of SCIM is to securely automate the exchange of user identity data between your company's cloud applications and any service providers, such as enterprise SaaS applications.

SCIM is a REST and JSON-based protocol that defines a client and server role. A client is usually an Identity provider (IDP), which contains user identities. A Service Provider (SP) is usually a SaaS app, like your WordPress site, that needs a subset of information from those identities. When changes to identities are made in the IdP, including create, update, and delete, they are automatically synced to the SP according to the SCIM protocol.

• Automates the provisioning and deprovisioning process while reducing the risk of error.
• User data is stored in a consistent way and can be communicated as such across different apps.
• Increased security and reduced costs by eliminating the possibility of idle user accounts and unauthorized information access.
• End-users have seamless access to applications for which they’re assigned, with up-to-date profiles and permissions.
• Benefits to an organization include easy onboarding/offboarding employees and streamlining user management across applications.

• Create: Creates user using First Name, Last Name, Email, Username and other attributes passed by IDP.
• Update: All Attributes except Email and Username are updated when a user is updated in the IDP.
• Delete: Users deleted from the IDP also get deleted from the User list in your WordPress site.

Select your IDP from the dropdown list. If you have a Custom Identity Provider, select Other from the dropdown.

• From the SCIM Configurations tab in the plugin, you will find the SCIM API Credentials.
• Copy the SCIM Base URL and SCIM Bearer Token from here and paste it in your IdP.
• You can generate a new SCIM Bearer Token by clicking on the Generate New Token button in the plugin.

Once you have configured your IdP with the plugin, you will be able to perform the following operations:


• Create Users: Users when created on your IdP, will be created automatically on your WordPress site
• Update Users: Users data will be updated automatically on your WordPress site when updated in your IdP.
• Delete Users:
  • De-provision: Users deleted from the IdP will be automatically deleted from the WordPress user list too
  • Deactivate: Users deleted from the IdP will be deactivated and not deleted from WordPress user list permanently.
  • De-provision Administrator: Enabling this option allows deletion of users with role as Administrator