SCIM (System for Cross-domain Identity Management)

The open standard your identity provider uses to create, update and deactivate user accounts in SaaS applications automatically, so joiners, movers and leavers are handled without manual admin work.

What is SCIM?

SCIM is an HTTP-and-JSON standard for synchronizing identities between an identity provider and the applications a company uses. It pushes account creations, attribute changes, group membership and deactivations from Entra ID, Okta or Google Workspace to each connected app, so the app's user list always mirrors the directory. Deprovisioning is the part auditors care about: when someone leaves, their seat is closed the moment IT disables them, not when an admin remembers.

Do you need SCIM for Claude?

You need it when seats must follow the HR system, when groups should map to roles and permissions, or when a security policy requires automated offboarding — typically from a few dozen users up. On Claude it is available for Claude Enterprise and for Console organizations; the Team plan offers SSO with just-in-time provisioning, which creates accounts at first login but does not remove them automatically. That difference is one of the reasons growing companies move from Team to Enterprise, and it is a standard item in our Cowork & Agentic Adoption rollout checklist. All seven ways to get Claude are compared in Seven paths to Claude.