{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41229,"path":"platform-security/identity/explore-scim-provider.md","title":"Exploring SCIM Provider","bundle":null,"doc_type":null,"release":"australia","body":"\n# Exploring SCIM Provider\n\nThe Service Provider provisions users and groups using the SCIM API.\n\nAs a SCIM provider, the ServiceNow schemas support SCIM APIs to provision users and groups.\n\nThe SCIM provider synchronizes the changes made to identities in the IdP, including creating, updating, or deleting records. These changes are automatically synchronized to the provider according to the SCIM protocol. Also, the IdP can read identities from the provider to add to the IdP directory. The IdP can then detect incorrect values in the provider that could create security vulnerabilities. The synchronization enables end users to have seamless access to applications for which they’re assigned, with up-to-date profiles and permissions.\n\n## Configurations for SCIM Provider\n\nTo configure the SCIM Provider, perform the following tasks:\n\n-   Activate the **SCIM v2 - ServiceNow Cross-domain Identity Management** plugin. To learn more, see [Activating the SCIM plugin](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/identity/activate-scim-plugin.md).​\n-   Activate the other plugins that other plugins that are required for SCIM:\n    -   [OAuth 2.0](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/t_SettingUpOAuth.md)\n    -   REST API Provider\n    -   [REST API Access Policy​](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/activate-rest-api-access-policy.md)\n-   Add the scim\\_admin role as part of the SCIM service.​\n\n**Warning:** Grant this role carefully. The scim\\_admin role is equivalent to giving the user the admin role, where the scmin\\_admin can add or update Personally Identifiable Information \\(PII\\).\n\n## Tables\n\nTwo tables, sys\\_user and sys\\_group, contain the SCIM attributes that do not map to existing ServiceNow tables. To know more about the tables, see the [SCIM-specific tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/api-reference/scim-api.md).\n\n"}}