What is SCIM, and how is it used with GitHub Enterprise Cloud?
Select an answer to reveal the explanation.
Short Explanation and Infographic
SCIM is the automation layer for identity. When someone is hired, the IdP provisions them in GitHub automatically. When they leave, SCIM removes them. No manual GitHub admin steps, no forgotten accounts — identity management runs itself.
Full explanation below image
Full Explanation
SCIM (System for Cross-domain Identity Management) is an open standard protocol (RFC 7642-7644) for automating the exchange of user identity information between identity providers (IdPs) and service providers (like GitHub). In GitHub Enterprise Cloud: (1) When SCIM is configured, adding a user to the IdP group automatically provisions their GitHub account and adds them to the organization. (2) Removing them from the IdP triggers automatic deprovisioning (removal from org, optionally account suspension). (3) Attribute changes (name, email) sync automatically. SCIM is required for Enterprise Managed Users (EMU) and is also available for standard GHEC organizations. Supported IdPs include Okta, Azure AD, and others. SCIM is NOT a Git sync protocol, not a webhook mechanism, and not an authentication protocol.