> For the complete documentation index, see [llms.txt](https://learn.heeler.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://learn.heeler.com/tenant-admin-guide/access/scim-provisioning.md).

# SCIM Provisioning

## Automating User Lifecycle from Your IdP

SCIM (System for Cross-domain Identity Management) lets your identity provider automatically create, update, and deactivate Heeler users based on group membership and lifecycle events in the IdP. With SCIM, when someone joins or leaves your company, their Heeler access updates automatically.

### Where to find it

Administration → **Access** → **SCIM Provisioning** in the left sidebar.

URL: `https://app.heeler.com/administration/access/scim`

### Quick start

See the [User Management](/getting-started/user-management.md) > [SCIM Provisioning](/getting-started/user-management/scim-provisioning.md) documentation. 

### Reference

The page shows the SCIM endpoint Heeler exposes for your tenant, your SCIM token (or a button to generate one), and any current provisioning status.

For attribute mappings and the specifics of role / group → role translation, see the SCIM Provisioning guide.

### When to use SCIM (vs SAML JIT)

| Need                                                | Best fit                         |
| --------------------------------------------------- | -------------------------------- |
| Auto-create users on first IdP login                | SAML Just-in-Time                |
| Auto-deactivate users when they leave the IdP group | **SCIM**                         |
| Auto-assign roles based on IdP group membership     | **SCIM** (or SAML Group Mapping) |
| Lightweight setup, small team                       | SAML JIT                         |

For larger organizations, SCIM is recommended — it removes the manual lifecycle work entirely.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://learn.heeler.com/tenant-admin-guide/access/scim-provisioning.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.