# SCIM provisioning

> Let your identity provider create and remove Cephable seats automatically. Enabled by Cephable together with your IT team.

Source: https://help.cephable.com/docs/it-admins/identity/scim-provisioning

---

Cephable is a SCIM 2.0 service provider. Your identity provider authenticates with a
per-organization bearer token and pushes user provisioning and deprovisioning to Cephable, so
granting a user in your IdP provisions a seat and removing them revokes it.

Set up [single sign-on](/docs/it-admins/identity/single-sign-on) first — SCIM assumes
federated identity.

:::callout type="important" title="Enabled with Cephable, not in the Portal"
SCIM is **not** a self-serve toggle. Cephable enables it for your organization and issues the
bearer token your identity provider will use, working with your IT team.

To start, or to change or rotate an existing configuration, email
[support@cephable.com](mailto:support@cephable.com).
:::

> **This section is included with Cephable Pro.**
>
> SCIM 2.0 provisioning for Microsoft Entra ID, Okta, OneLogin, and any compliant provider — automatic joiners and leavers, with seats freed as part of offboarding. Included with Cephable Pro and Education, and enabled by the Cephable team with your IT.