SCIM is a standard for exchanging identity data and automating account provisioning between an identity system and a connected app. It complements SSO but solves a different task.
SSO and SCIM compared
| Capability | SSO | SCIM provisioning |
|---|---|---|
| Main job | Authenticate a person into a supported app | Synchronize identity records and account lifecycle events |
| Common protocols | SAML or OpenID Connect | SCIM over a documented API integration |
| Typical event | User signs in | Admin creates, updates or disables a user |
| Vendor check | Supported identity provider and protocol | Supported objects, attributes, groups and plan tier |
Microsoft’s identity platform documentation describes SSO integrations and automated provisioning as related but distinct configuration areas. An app can support SSO without supporting SCIM.
Vendor checklist
- Check whether the software plan includes SCIM and whether the feature is available in your region.
- Ask which identity provider connectors and SCIM versions are supported.
- Verify which attributes, groups and roles can be synchronized.
- Confirm how deactivation, reactivation and ownership changes are handled.
- Test the lifecycle with a small pilot group and document recovery steps.
Use our SSO checklist before comparing SAML and OIDC. Browse security and IT software.
Related guides
- Do You Need Single Sign-On for a Small Business?
- SAML vs OIDC: Which SSO Protocol Should You Use?
- SEO Tool vs Social Media Management Software
- Browse Security & IT.
Sources
Common questions
Does SCIM replace SSO?
No. SSO handles authentication. SCIM can automate account creation, updates and deactivation between connected systems.
Does every app support SCIM?
No. Check the app’s documentation and plan details for supported provisioning features.
Is SCIM automatic once I buy it?
No. The identity provider and app need compatible configuration, attribute mapping and a tested workflow.