SCIM User Provisioning

Automate user lifecycle management with SCIM provisioning. Automatically create, update, and deactivate user accounts in Nestr when changes happen in your identity provider, removing the need for manual onboarding and offboarding.

What is SCIM provisioning?

SCIM (System for Cross-domain Identity Management) is an open standard for automating user account management between an identity provider and a connected application. When SCIM is configured between your identity provider and Nestr, user accounts are created, updated, and deactivated automatically. Adding a new employee in Okta or Azure AD immediately creates their Nestr account, and removing them deactivates it.

Which identity providers does Nestr support for SCIM?

Nestr's SCIM implementation is compatible with any identity provider that supports the SCIM 2.0 standard, including Okta, Azure Active Directory, Google Workspace, and OneLogin. Setup involves generating a SCIM endpoint URL and token in Nestr and entering these in your identity provider's application configuration.

Why use SCIM for user management in Nestr?

Manual user management creates security risks: offboarded employees may retain access longer than intended, and new employees may wait before gaining the access they need. SCIM eliminates both problems by making Nestr user provisioning a direct consequence of your authoritative identity system, reducing both administrative burden and access risk.