SCIM
Let's pivot for a moment into user provisioning. Imma kept it a buck with you, this lifecycle management for different users is draining if you deal with it manually especially if you have hundreds or thousands of users. Imagine you have to give access to 20 people a day for a certain app or server.
This is where SCIM comes in, it automates the process of exchanging user identity (attributes) information or gives the admin the chance to automate the user lifecycle management.. For example, if a new employee is onboarding HR can create a new user in ServiceNow and put them in the sales group based on these attributes SCIM picks it up and sends it to salesforce.
The process¶
- You create the user "Tim" and tag him as "Department: Sales."
- ServiceNow sends a SCIM message to Entra ID saying, "Create Tim, he is in Sales."
- Entra ID creates the account. It has a rule: "If Department = Sales, add user to 'Salesforce_Users' group."
- Entra ID sends a SCIM message to Salesforce saying, "Create Tim, and put him in the 'Salesforce_Users' group."
- Salesforce receives the message. It sees "Tim" is in the "Salesforce_Users" group and automatically unlocks the Sales Dashboard.
This is where Entra ID Lifecycle Management comes in 😉
