The SCIM (System for Cross-domain Identity Management) integration is an essential tool that simplifies user management by automating the exchange of identity information between your organization's Identity Provider (IdP) and Jasper. With SCIM provisioning, tasks such as creating, updating, and deactivating user accounts in Jasper are fully automated, ensuring seamless synchronization with your organization's directory. This not only reduces the risk of errors but also saves valuable time by eliminating the need for manual data entry.
Most Identity Providers (e.g., Okta, Entra ID [formerly Azure AD]) support SCIM, making the integration straightforward for organizations already using such systems. This allows IT administrators to manage all Jasper user accounts directly through their existing Identity Provider.
Main Functionalities
The SCIM feature provides the following key functionalities:
- Automated User Sync: Once set up, user identities and permissions are automatically synchronized between your IdP and Jasper.
- Deactivation of Users: Automatically revokes Jasper access for deactivated users on the organizational directory.
- Scalable Management: Supports large-scale user management for businesses with robust workflows.
How to Enable and Use the SCIM Integration
Step 1
- To begin, contact the Jasper support team by emailing hey@jasper.ai. The team will provide a tailored setup guide specific to your SCIM provider.
- When a customer transitions to SCIM, user management responsibilities (provisioning, deprovisioning, role assignments) move from workspace Admins to the IT Admins managing the customer’s Identity Provider (e.g., Okta, Entra ID). This ensures a more centralized and streamlined process.
- To manage the User Directory, IT Admins must first be added as users through SCIM.
Step 2
- After you integrate SCIM, the IT Admin will navigate to Workspace Settings and click on Organization Settings in the bottom left corner.
Step 3
- IT Admins will see a new Directory page under Users. The Director page has two tabs.
- The first tab will show users auto-provisioned by your IDP provider (e.g. Okta, Azure).
-
- The second tab will show users manually added. Use this for users that you’d like to invite to your workspace but aren’t managed through your IDP. e.g. Agency partners, contractors, freelancers.
-
- When you click on Invite user, you will be able to add the user via email address and assign workspace(s) and role(s).
Step 4
To manage an individual user, click on the ... on the far right of the table, then click edit.
Step 5
You can manage the individual user by assigning more workspaces and roles or editing workspaces and roles.
Step 6
To manage multiple users at once, check the box next to their name, then click on Add to workspaces above the table.
Step 7
You can assign workspaces and roles to multiple users at once.
Accessibility
Plan Access:
- This is specific to Business plans.
Role-Specific Access:
- IT Admins: Manage SCIM integration for the organization.
- Admins: Can request SCIM setup.
- Members: Do not have access to configure or manage SCIM.
Frequently Asked Questions
Who can enable the SCIM feature for my organization?
- Only Workspace/IT Admins can request and enable SCIM.
Who should be added as an IT Admin?
- The person(s) who manage the customer’s IdP should be added as the IT Admin.
Do IT Admins take up a seat?
- Yes, the IT Admin takes up a seat and also has Admin access in the Workspace.
What are the Admin's responsibilities for user management once SCIM is enabled?
- Admins no longer manage user management (provisioning, deprovisioning, roles). The IT admin does. Admins still manage other aspects of Jasper, including permissions, settings, usage metrics, API access, etc.
Are there any known limitations with SCIM?
- When managing multiple Jasper workspaces, IT administrators must designate the specific workspace each user is authorized to access within the Jasper platform.
Does SCIM integrate with SSO?
- Yes, SCIM adds functionality to SSO by allowing complete user management from a single IdP.
How does this feature impact existing workflows or settings?
- Enhances SSO capabilities, enabling IT Admins to efficiently manage a single workspace with complete control.
By leveraging SCIM integration, organizations can drastically improve efficiency, reduce manual errors, and maintain tighter control over user provisioning. For further resources, reach out to Jasper support at hey@jasper.ai.