Provisioning users with SCIM
Have your identity provider create, update and deactivate members and keep teams in sync.
On the Enterprise plan your identity provider can manage your SignSpry members through SCIM 2.0. Set it up under Admin → Single sign-on & SCIM, section SCIM provisioning.
Connect
- Press Create token. Copy it straight away — it isn't shown again.
- In your identity provider's SCIM settings, enter the SCIM base URL
(https://signspry.com/scim/v2) and the token as a bearer token (Authorization: Bearer scim_…).
- Map userName to the person's work email.
Creating a new token revokes the old one; Revoke stops provisioning.
What happens in SignSpry
| In your identity provider | In SignSpry |
|---|---|
| Assign a person | A member is created with the default role from the SSO settings, using a seat |
| Change their name or email | The member is updated |
| Unassign or deactivate | The member is deactivated at once and signed out everywhere |
| Delete | Deactivated; their documents and audit trail stay with your organisation |
| Push a group | A team with the same members |
- Roles stay managed in SignSpry (Admin → Users).
- An address that already has its own SignSpry account elsewhere is refused with a
conflict; invite that person from Admin → Users instead.
- The organisation's last active admin can't be deactivated through SCIM.
Supported
Users and Groups with GET (filter userName eq, externalId eq, displayName eq), POST, PUT, PATCH and DELETE; /ServiceProviderConfig, /ResourceTypes and /Schemas. Bulk operations, sorting and ETags aren't supported. Requests are limited to 600 a minute.
Was this useful?