- 1. SCIM integration in general
- 2. What is this module about
- 3. Why use this module
- 4. How to activate this module
- 5. Additional reports
- 6. Additional settings and options after enabling
- 7. Additional information
- 8. User manual
- 9. Q&A
Note
This article is about the steps needed to activating the SCIM integration from Asset point of view. However, for the complete end-to-end integration, it is also relevant to set-up the Spacewell integration platform (router) and make sure that the customer has configured the relevant options and settings in their Azure application. Therefor this specific article is only 1 of the steps needed and it is advised to start the complete implementation via the general ‘SCIM integration’ page (to be found via Implementation consultants → Default integrations → SCIM). One of the steps in those articles will guide you back to this article!
1. SCIM integration in general
SCIM (System for Cross-Domain Identity Management) is a standardized specification for managing user identities across applications. It is widely adopted, especially in cloud-based environments, and simplifies integration with centralized Identity and Access Management (IAM) systems.
The main advantage of SCIM is that provisioning works with minimal configuration. Once a connection is established and authorized, the system can automatically provision users, groups, and other resources and manage their attributes and group memberships
2. What is this module about
This module is about the provisoning groups and users from Azure to Asset.
For more information about the SCIM integration as a whole, see: SCIM integration
3. Why use this module
- Automated User Provisioning: SCIM automates the creation, updating, and deletion of user accounts in Asset.
- Data Synchronization: It synchronizes user data (e.g., names, emails, roles) between identity providers and Asset in real-time. This ensures consistency and reduces manual errors.
- Group Management: SCIM allows for the provisioning of groups, enabling organizations to assign app access to entire teams or departments efficiently.
- Access Governance: It simplifies monitoring and auditing of user privileges, ensuring compliance with security policies.
- Integration with SSO: SCIM complements Single Sign-On (SSO) by provisioning the user accounts and attributes required for SSO to function seamlessly.
- Deprovisioning: When employees leave or change roles, SCIM automates the deactivation of their accounts, reducing security risks and eliminating unused licenses.
4. How to activate this module
As for every new module, use the ‘Module activation’ option on the administrator startboard (only available for level 2 and level 3 admins). For more general information about these 'Module activation' options, see Module activation
The SCIM integration has separate configuration guides for the customer and implementation consultants. These configuration guides can be found via: Configuration guides SCIM. This module activation is a step in the complete configuration guides.
4.1 Prerequisites before activating this module
The SCIM integration does not require any other modules to be active. The only prerequisites for the SCIM integration are:
- Asset has enough licenses available for all users to be provisioned
- The user profiles in Asset have been generated in order to map them to the corresponding groups from Azure
4.2 Module activation
For this specific module activation, no settings to be determine apply. The module activation will create the External app automatically and this External app is needed to complete the configuration in the Integration Platform.
4.3 Data imports
For this module activation, no data imports are relevant. For more information on data imports in general, see: Data imports
4.4 System groups
For this module activation, no specific system groups are applicable. It is only relevant that user profiles have been created, which correspond with the groups provisioned from Azure.
Via the 'User profile management' option on the administrator startboard, all active system groups can be assigned to existing user profiles or add them to newly created user profiles.
4.5 Navigation menu and startboard options
No additional navigation menus become available, when activating the SCIM integration.
For more general information on the navigation menu and startboard, see: Navigation menu and Startboard
5. Additional reports
No additional reports are applicable, when activating the SCIM integration.
6. Additional settings and options after enabling
For most modules, additional settings can be configured after the initial module activation via the 'Module settings' option on the administrator startboard. A module is always activated with the most used settings pre-defined. After the module is activated, the module may have more advanced settings available, which can be managed via the Module settings as well.
To navigate to all SCIM integration settings, go to ‘Modules settings’ → ‘Integrations' tab → 'SCIM’ tab. Currently there are no other SCIM settings to be determined.
7. Additional information
No additional information currently
8. User manual
No user manual applicable for the calendar integration.
9. Q&A
Waiting for questions to answer