SCIM (System for Cross-domain Identity Management) is a set of protocols that allow a third-party identity provider to manage users inside Superhuman Docs for your organization. This enables your identity provider to automatically provision and de-provision users and groups in Docs, based on their roles and application assignments within your identity provider.

This article will cover the basics of setting up SCIM for your org, including some standard instructions.

Before you get started

This article contains generic instructions for setting up SCIM. Before you begin, here are a few important notes:

• You must be an org admin on our Enterprise plan to follow these steps

• You will need access to your org’s identity provider

• Before enabling SCIM, you must first have configured SAML for your org

Part 1: Enable SCIM in Superhuman Docs

The first step is to enable SCIM within your Superhuman Docs admin settings. Note that you must be an Enterprise org admin to follow these steps:

1. Go to docs.superhuman.com

2. Click on your account name in the lower-left, then choose Admin settings from the list

3. Scroll to - or search for - the Security setup tab (within the Security section)

4. Here you will see info about the transition from coda.io to docs.superhuman.com. For now, SCIM is still managed on coda.io. Click Manage security settings, and you will be redirected to a coda.io page.

5. In the new coda.io page, select the Provisioning tab 

6. Toggle on the Provision with SCIM setting.

   1. If you haven't yet configured SAML for your org, you won't be able to turn this on. Complete the steps in this article before proceeding.

   
    

7. Then click Generate new token at the bottom of the page. (Note: Only one SCIM token is valid at a time. If SCIM was previously configured, generating a new token invalidates the previous token.)

8. Note the SCIM Base URL and SCIM Bearer Token. You will need this information later.

Part 2: Configure SCIM in your identity provider

Next, you’ll need to configure SCIM within your identity provider platform:

1. Create a new application in your identity provider administration console and enable SCIM.

2. Copy the SCIM Base URL from Superhuman Docs (see the steps in the section above) into the appropriate location in your identity provider setup.

3. Copy the SCIM Bearer Token from Docs into the appropriate location in your identity provider setup. Note that your identity provider may require the word Bearer before the token (e.g. Bearer 12345678-abcd-9012-abfe-345678901234 ).

4. Ensure your application passes user identity to Docs in "email" format; that is, your identity provider is sending email-address-like user identities to Docs.

What can I do with SCIM?

Once you’ve configured SCIM for your Superhuman Docs org, you can use it to take the following actions:

• Create users

• Update user attributes

• Deactivate users

• Push user groups to Docs (📣 check out this article to learn how)

FAQs

Related resources

• Set up SSO for your org

• Push user groups to Superhuman Docs

• Overview: Enterprise security features