SCIM (System for Cross-domain Identity Management) is a standard protocol that automates user provisioning and de-provisioning between your organization’s Identity Provider (IdP) and the Upflex platform. This integration ensures streamlined user management: saving time, improving security, and reducing manual errors.
🧠 What SCIM Does
SCIM enables your IT team to:
✅ Automatically create new users in Upflex
🔄 Update user roles, teams, and attributes
❌ Deactivate users who leave your organization
🔐 Note: Upflex does not process passwords or any sensitive personally identifiable information (PII).
🛠 Step 1: Set Up the SCIM Endpoint
Upflex will generate and provide:
- A SCIM API URL
- A Credential Header for authentication
This information will be shared securely with your IT team.
📞 Step 2: SCIM Setup Call
Coordinate a call between your IT team and Upflex to:
- Walk through setup steps
- Review data fields and mapping
- Begin initial testing
If you'd like to schedule a UAT trial environment before going live, please let us know in advance—it will add some extra time to setup.
🔄 What Upflex Receives (One-Way SCIM)
Upflex receives the following events:
- New user creation
- User attribute updates
- User deactivation
🚫 Upflex does NOT accept:
- Passwords
- Private or unnecessary personal data
✅ Supported User Properties
- Attribute Description
- email User’s email address (required)
- firstName User’s first name (required)
- lastName User’s last name (required)
- upflexRole Role in Upflex: Manager or Team Admin. Default is User if not specified.
- upflexTeam Assigned team. If the team name doesn’t exist, it will be created automatically.
- department User’s department (optional; flexible value)
- costCenter User’s cost center (optional; flexible value)
⚠️ Primary Contact Role is not managed via SCIM. It must be assigned manually in the Upflex Admin Portal for security purposes.
👥 Role Definitions
- User: Standard user with booking capabilities
- Manager: Can book spaces on behalf of others
- Team Admin: Can manage users within their team (must be assigned to a team)
👨💻 Customer SCIM Setup & Testing
1. Add a test user or group in your IdP and push them to Upflex.
2. Upflex will confirm the users are received and properly mapped.
3. Conduct de-provisioning tests to ensure terminated users are removed from Upflex.
🚨 Troubleshooting & Important Notes
- Reach out to Upflex support if any user attribute mapping issues arise.
- The email address is the unique user identifier.
- If you plan to change your email domain, please notify Upflex before the change to avoid access issues.
Have questions or want to schedule your SCIM setup call?
📧 Reach out via CHAT and let them know and they get this scheduled.