SCIM Provisioning
SCIM (System for Cross-domain Identity Management) lets your identity provider automatically provision and deprovision Dacard accounts. When you add a user to your IdP group, they get a Dacard account. When you remove or deactivate them, their access is revoked immediately no manual steps required. SCIM is available on the Enterprise plan. Navigate to Settings > SCIM to see your endpoint details.Supported operations
| Operation | What it does |
|---|---|
| Create user | Automatically provisions a new Dacard account when a user is added in your IdP |
| Deactivate user | Revokes access when a user is deactivated or removed in your IdP |
| Update user | Syncs name and email changes from your IdP to Dacard |
| Push groups | Maps IdP groups to Dacard roles (admin, lead, member) |
SCIM endpoint
Your SCIM base URL is:Setup guide
SCIM is configured in your identity provider, not in the Dacard UI. The general process:Contact support
Email support@dacard.ai to request your SCIM bearer token and provider-specific setup guide.
Add a SCIM app in your IdP
In your identity provider (Okta, Azure AD, etc.), create a new SCIM application. Enter the Dacard SCIM base URL and your bearer token.
Configure attribute mapping
Map IdP user attributes to SCIM standard fields:
userName (email), name.givenName, name.familyName, and groups for role mapping.Test provisioning
Assign a test user in your IdP and verify their Dacard account is created. Then deactivate the test user and verify access is revoked.
Role mapping via groups
Map IdP groups to Dacard roles using group push:| IdP group name | Dacard role |
|---|---|
dacard-admins | Admin |
dacard-leads | Lead |
dacard-members | Member |
Provider-specific guides
Our team provides setup guides for:- Okta SCIM 2.0 app configuration with attribute mapping
- Azure AD / Entra Enterprise application provisioning setup
- Google Workspace Requires a third-party provisioning bridge
- OneLogin SCIM provisioning with role synchronization
Requirements
| Requirement | Detail |
|---|---|
| Plan | Enterprise |
| Bearer token | Provided by Dacard support during onboarding |
| Setup time | Typically under 2 hours once you have the token |
SSO
Pair SCIM provisioning with SSO for fully automated identity management.
Roles & Permissions
Understand Dacard roles before configuring group mapping.