SCIM provisioning
Let Okta or Entra ID create, deactivate, and regroup AxioRank members automatically.
SCIM 2.0 provisioning rides your workspace's SAML SSO connection: once SSO is
active, your identity provider can create members, deactivate them when they
leave, and keep their workspace roles in sync with IdP groups. Every
IdP-driven change lands on the Config Changes page with actor scim, exactly
like a dashboard edit.
Setup
- Activate SAML SSO for the workspace (Team plan and above).
- In Settings → Security → SCIM provisioning, generate the bearer token (owner-only, shown once).
- In your IdP's provisioning settings, set:
- Base URL:
https://app.axiorank.com/api/scim/v2 - Bearer token: the token from step 2.
- Base URL:
Okta calls this "API integration" under Provisioning; Entra ID calls it "Automatic provisioning" with Tenant URL + Secret Token.
What syncs
| IdP action | AxioRank effect |
|---|---|
| Assign user | The auth account is created if needed and joins the workspace (seat-gated, like every join path). |
| Deactivate / unassign user | The membership is removed. The account itself is untouched, and the last owner can never be deprovisioned. |
| Push group | The group appears under group mappings; members' roles recompute. |
| Group membership change | Affected members' roles recompute. |
Group to role mappings
Map IdP groups to workspace roles in Settings → Security. A member in any mapped group gets the highest mapped role; members in no mapped group get the connection's default role. Owner is never grantable through groups.
The same mappings apply to SAML JIT sign-ins when your IdP includes a
groups attribute in the assertion, so role mapping works even before SCIM
is connected.
Supported surface
Users and Groups resources with eq filters, PATCH (including Entra's
string booleans), and the standard ListResponse envelopes. Bulk operations
and sorting are not supported; provisioners do not use them.
Next steps
- Workspace security: SSO, MFA, and session rules.
- Approvals: the human-in-the-loop side of governance.