Automate User Provisioning with SCIM Directory Sync

Sync users and groups from your Identity Provider (IdP) to Kestra using SCIM.

SCIM (System for Cross-domain Identity Management) is an open-standard protocol that automates user provisioning, de-provisioning, and group synchronization between identity providers (IdPs) such as Microsoft Entra ID or Okta and service providers such as Kestra. Kestra uses the SCIM 2.0 protocol.

Benefits of directory sync with SCIM

1. Automated provisioning and de-provisioning: SCIM automates the provisioning and de-provisioning of users, creating a single source of truth (SSOT) for user identity data. Instead of manually creating and managing users in Kestra, you can synchronize them from your IdP.
2. Consistency and compliance: With SCIM, you can ensure consistency of identity information across systems and stay compliant with security and regulatory requirements.
3. Governance at scale: Managing users at scale across many applications can be difficult without a standardized method for identity synchronization. SCIM provides a scalable solution for managing user identities.

Supported identity providers

For setup guides by provider, see the pages below.