Directories & identity providers
Per vendor documentation
Connect applications via SCIM 2.0
Nova connects applications with SCIM 2.0 through a generic connector, with no dedicated connector per application. This list names applications whose vendors, according to their own documentation, offer a general SCIM 2.0 endpoint. As of 8 November 2026.
How to read the list
Usable per vendor documentation
The vendor documentation describes a general SCIM 2.0 endpoint. As far as described there, no deviation is known that Nova's current SCIM connector does not cover.
Per vendor documentation, with a setting
According to the vendor documentation, the application needs a setting in the SCIM connector, such as update through PUT, an additional header, a different way of removing members, or delete as deactivate. These settings are not available today; they are planned for the next connector release.
Not yet tested individually
Nova has not yet tested these applications individually, and the acceptance test of the SCIM connector is still open. The status reflects what the vendors document and is not a commitment.
The PoC settles each case
Whether an application fits your setup is settled in the PoC. Warnings in the row name known consequences, for example when deactivating deletes permanently.
Check the plans
Many vendors require higher plans for this, see the column “Plan per vendor”.
List
Applications by category
86 usable per docs, 15 with a setting
No application found. That does not mean it offers no SCIM. Talk to us.
Work and product management
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| AirtableFilter on userName eq only. SSO required to create and change. | Bearer with scope | Business, Enterprise (groups on Enterprise only) | Yes | Usable per vendor documentation | Vendor docs for Airtable |
| AsanaGroups are teams. Access through a service account. | not stated | Enterprise Domain, service account only | Yes | Usable per vendor documentation | Vendor docs for Asana |
| Atlassian Cloud (Jira, Confluence, Jira Service Management, Bitbucket)AtlassianCaution: DELETE deactivates and unlinks; the SCIM record cannot be restored afterwards.Organization-wide through Atlassian Guard. Custom path, groups cannot be renamed. | Bearer | Atlassian Guard Standard; organization admin role | Yes | Usable per vendor documentation | Vendor docs for Atlassian Cloud (Jira, Confluence, Jira Service Management, Bitbucket) |
| ClockifyCAKE.comCaution: Enabling it deletes existing groups and locks group management in Clockify.Subdomain required. | Bearer token | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Clockify |
| LinearGroups correspond to teams, roles run through groups. | Bearer | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Linear |
| ProductboardWith a setting: users cannot be deleted, only active=false; delete as deactivate needed. | Access token or OAuth2 | Enterprise | Yes | Per vendor documentation, with a setting | Vendor docs for Productboard |
Operations and monitoring
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| Cisco ThousandEyesCiscoCaution: Accounts only, no groups.Filter on userName and externalId only. /Groups has no function. | Basic token or OAuth bearer | not stated | No | Usable per vendor documentation | Vendor docs for Cisco ThousandEyes |
| CoralogixDeleting existing users before setup is recommended. Group names without dots. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for Coralogix |
| Dynatrace SaaSDynatraceVerified email domains only. Permissions for SCIM groups are assigned separately. | Bearer | not stated; DNS-verified domain required | Yes | Usable per vendor documentation | Vendor docs for Dynatrace SaaS |
| FireHydrantHeader application/scim+json required. userName cannot be changed. | Bearer | Enterprise | Yes | Usable per vendor documentation | Vendor docs for FireHydrant |
| RootlyCaution: active=false removes team memberships.Path without /v2. userName must be an email address. | Bearer | not stated; SSO required | Yes | Usable per vendor documentation | Vendor docs for Rootly |
| SentryFunctional Software (Sentry)Caution: active=false permanently deletes the member.Groups are teams. SAML2 required. | Bearer | Business or Enterprise with SAML2 | Yes | Usable per vendor documentation | Vendor docs for Sentry |
| ServiceNowPlugin SCIM v2 required. Path /api/now/scim. | OAuth bearer | Plugin com.snc.integration.scim2, role scim_admin | Yes | Usable per vendor documentation | Vendor docs for ServiceNow |
| Sumo LogicRoles through app roles or an attribute. | Basic or bearer with access ID and key | not stated; SAML required | Unclear | Usable per vendor documentation | Vendor docs for Sumo Logic |
Cloud and infrastructure
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| BackblazeNew users have no permissions. | API key in the header | Enterprise Web Console | Unclear | Usable per vendor documentation | Vendor docs for Backblaze |
| CockroachDB CloudCockroach LabsPath /api/scim/v2. Token from a service account with the organization admin role. | Bearer | not stated; Cloud Organization SSO required | Yes | Usable per vendor documentation | Vendor docs for CockroachDB Cloud |
| Confluent CloudConfluentCaution: Accounts only, no groups.userName must be an email address with a verified domain. Token valid for 2 years at most. | Bearer token | Advanced Security add-on (Limited Availability), SSO | No | Usable per vendor documentation | Vendor docs for Confluent Cloud |
| DruvaCaution: Accounts only, no groups.Applies to inSync. Deactivated accounts are retained. | Token from the SCIM settings | not stated; must never have used AD/LDAP for users | No | Usable per vendor documentation | Vendor docs for Druva |
| STACKITSchwarz IT / STACKITApplies to the STACKIT IdP. Client ID and secret via support ticket. | Bearer with scope, client ID via support ticket | not stated; active STACKIT customer account | Yes | Usable per vendor documentation | Vendor docs for STACKIT |
Data and analytics
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| AlationSetup through the Django shell, on Cloud through support. Nested groups are ignored. | Bearer or Basic | not stated; SAML must be active | Yes | Usable per vendor documentation | Vendor docs for Alation |
| Alteryx One PlatformAlteryxCaution: Removing a user from the group deactivates the user.Applies to the platform, not to Alteryx Server. SAML SSO required. | Bearer | Enterprise Edition | Yes | Usable per vendor documentation | Vendor docs for Alteryx One Platform |
| AmplitudeCaution: active=false removes the user from the organization.Path /scim/1. 100 requests per minute. | Bearer | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Amplitude |
| CollibraCaution: The option Groups DGC managed must be off, otherwise memberships may be lost.No roles through SCIM. | Basic, JWT or OAuth client credentials | not stated | Yes | Usable per vendor documentation | Vendor docs for Collibra |
| DatabricksCustom path. userName and emails cannot be changed through PATCH. | Bearer | Premium or higher | Yes | Usable per vendor documentation | Vendor docs for Databricks |
| FivetranEmail and userName must match. Account roles only. | SCIM API token as secret token, generated in Account Settings | Enterprise or Business Critical | Yes | Usable per vendor documentation | Vendor docs for Fivetran |
| MetabasePath /api/ee/scim/v2. Token is shown only once. | SCIM token, header format not stated | Pro or Enterprise | Yes | Usable per vendor documentation | Vendor docs for Metabase |
| MixpanelOnly affects users with a verified domain. | Bearer | Enterprise | Unclear | Usable per vendor documentation | Vendor docs for Mixpanel |
| Monte CarloMonte Carlo DatauserName equals email. active is a required attribute. | Bearer token from setup | not stated; Account Owner role | Yes | Usable per vendor documentation | Vendor docs for Monte Carlo |
| SegmentTwilioCaution: active=false removes the user from the workspace; re-adding deletes group memberships.New users and groups get Minimal Access only. | not stated | Business plan, SSO connection required | Yes | Usable per vendor documentation | Vendor docs for Segment |
| SnowflakeGroups correspond to roles. The SCIM role must own users and roles. | Bearer (External OAuth, Programmatic Access Token) | not stated | Yes | Usable per vendor documentation | Vendor docs for Snowflake |
| Tableau CloudSalesforce (Tableau)On creation only userName and siteRoles count. SSO must be active. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for Tableau Cloud |
| ThoughtSpotCaution: No disabled state: deprovisioning deletes permanently, content goes to tsadmin.Token valid for 6 months. At most 40 or 20 parallel requests. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for ThoughtSpot |
Development and DevOps
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| AstroAstronomerCaution: Deactivating removes roles and teams.For owners, active and profile changes have no effect; DELETE always applies. | Bearer | Enterprise or higher | Yes | Usable per vendor documentation | Vendor docs for Astro |
| Bitriseroles replaces all roles. Verified domain required. | Authentication token from the SCIM tab, scheme not stated | Enterprise or SAML SSO add-on | Yes | Usable per vendor documentation | Vendor docs for Bitrise |
| BrowserStackCaution: Deactivating deletes the user, reactivating creates a new ID. Accounts only, no groups.Team and role as separate attributes. | Bearer or Basic with access key | Enterprise, SSO required | No | Usable per vendor documentation | Vendor docs for BrowserStack |
| DockerCaution: Accounts only, no groups.With a setting: update and deactivate through PUT, no PATCH and no DELETE in the reference. | Bearer | not stated; SSO required | No | Per vendor documentation, with a setting | Vendor docs for Docker |
| GitHub Enterprise CloudGitHubCaution: DELETE is irreversible and anonymizes.With a setting: User-Agent header mandatory; filter paths such as members[value eq] are documented as ineffective, remove members through batch remove or PUT. | Bearer | Enterprise Cloud with Enterprise Managed Users | Yes | Per vendor documentation, with a setting | Vendor docs for GitHub Enterprise Cloud |
| JFrog PlatformJFrogCustom path. Users and groups cannot be renamed. | not stated | Enterprise X or Enterprise+ | Yes | Usable per vendor documentation | Vendor docs for JFrog Platform |
| LaunchDarklyCaution: Accounts only, no groups.OAuth2 only, client through support only, grant type not stated. | OAuth2 | Enterprise, SSO | No | Usable per vendor documentation | Vendor docs for LaunchDarkly |
| PostmanGroup filter on displayName only. The admin key cannot deactivate a super admin. | API key in the Authorization header | Enterprise, SSO must be set up | Yes | Usable per vendor documentation | Vendor docs for Postman |
| Pulumi CloudPulumiCaution: Group DELETE deletes the team.With a setting: no DELETE for users, delete as deactivate needed. | SCIM token, header format not stated | Enterprise | Yes | Per vendor documentation, with a setting | Vendor docs for Pulumi Cloud |
| RetoolPath /api/scim/v2. Default groups cannot be renamed through SCIM. | Bearer | not stated; Cloud or self-hosted from 2.32.1 | Yes | Usable per vendor documentation | Vendor docs for Retool |
| SonarQube CloudSonarSourceToken is shown only once. Groups must be assigned to an organization. | Bearer | Enterprise license | Yes | Usable per vendor documentation | Vendor docs for SonarQube Cloud |
| SourcegraphCaution: Accounts only, no groups.Path /.api/scim/v2. Only one SCIM client per instance. | Bearer | not stated | No | Usable per vendor documentation | Vendor docs for Sourcegraph |
| SpaceliftNo bulk. SCIM does not grant permissions; users without a role cannot sign in. | OAuth | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Spacelift |
| SuperblocksInstance URL depends on Cloud US, Cloud EU or Cloud-Prem. | Org admin token in the HTTP header | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Superblocks |
| ZapierBase /scim/v3. Verified domains only. | Bearer | Enterprise with Workspaces | Yes | Usable per vendor documentation | Vendor docs for Zapier |
Finance and procurement
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| AnaplanCaution: Accounts only, no groups.With a setting: sign-in through Basic, a separate auth token or API key instead of bearer. | Basic, auth token or API key | not stated | No | Per vendor documentation, with a setting | Vendor docs for Anaplan |
| BrexuserName must match the email address. | Bearer token from Team settings > Connect SCIM | Premium, Enterprise | Unclear | Usable per vendor documentation | Vendor docs for Brex |
| Stripe DashboardStripeCaution: active=false deletes the account like DELETE.SSO and live mode required. Roles not through SCIM. | Bearer | not stated; admin role, SSO configured, live mode | Yes | Usable per vendor documentation | Vendor docs for Stripe Dashboard |
Identity and access
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| Akamai MFAAkamaiPer vendor, only a minimal subset of SCIM. | not stated | not stated | Yes | Usable per vendor documentation | Vendor docs for Akamai MFA |
| Auth0Okta (Auth0)SCIM endpoint per Enterprise Connection. | Bearer token with scopes, two active at once, optional expiry | Plan or contract with Enterprise Connections | Yes | Usable per vendor documentation | Vendor docs for Auth0 |
| AWS IAM Identity CenterAmazon Web ServicesCaution: The documentation requires cursor paging and does not support startIndex: Nova reads lists without a cursor, so complete lists above 100 entries are not assured. Groups return empty members.With a setting: remove members through path members with a value list instead of members[value eq]. | Bearer | not stated | Yes | Per vendor documentation, with a setting | Vendor docs for AWS IAM Identity Center |
| BeyondTrustSeparate endpoints for Pathfinder, PRA and Password Safe. | Bearer or OAuth client credentials, by product | not stated | Yes | Usable per vendor documentation | Vendor docs for BeyondTrust |
| BitwardenNew accounts start as Staged. Memberships cannot be queried through SCIM. | SCIM API key, header format not stated | Teams or Enterprise | Yes | Usable per vendor documentation | Vendor docs for Bitwarden |
| Cisco DuoCiscoCaution: active=false breaks the SCIM link; DELETE moves the user to the trash for 7 days.Token expires every 90 days. Admins are not managed. | Bearer token from the admin panel | Duo Premier, Advantage, Essentials | Yes | Usable per vendor documentation | Vendor docs for Cisco Duo |
| DelineaCaution: DELETE is permanent.Sign-in through a service user. No bulk. | OAuth client credentials | not stated | Yes | Usable per vendor documentation | Vendor docs for Delinea |
| KeeperKeeper SecurityEndpoint per node. New teams and memberships need approval. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for Keeper |
| OCI IAM Identity DomainsOraclePath /admin/v1. members only returned with attributes=members. | OAuth | not stated | Yes | Usable per vendor documentation | Vendor docs for OCI IAM Identity Domains |
| Omnissa Identity Service (Workspace ONE)OmnissaOnly for new Workspace ONE tenants. | OAuth client credentials | not stated; new Workspace ONE tenants only | Yes | Usable per vendor documentation | Vendor docs for Omnissa Identity Service (Workspace ONE) |
| StrongDMCustom path. Groups are roles. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for StrongDM |
Content and documents
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| ContentstackBeta. Regional endpoints. | not stated | not stated | Yes | Usable per vendor documentation | Vendor docs for Contentstack |
| IroncladWith a setting: with client credentials, additional header x-as-user-email or x-as-user-id needed. | Bearer or client credentials with additional header | not stated; SAML connection required | Yes | Per vendor documentation, with a setting | Vendor docs for Ironclad |
| PandaDocCaution: No disabled state: deprovisioning deletes, documents go to the workspace owner.Groups control role, license and workspace. | Bearer with a self-generated 256-bit key | SSO on Enterprise, add-on on Business | Yes | Usable per vendor documentation | Vendor docs for PandaDoc |
| SurveyMonkey EnterpriseSurveyMonkeyCaution: Accounts only, no groups.Beta. One IdP per team. | Bearer token, generated by the primary admin | Enterprise with SSO; feature in beta | No | Usable per vendor documentation | Vendor docs for SurveyMonkey Enterprise |
AI tools
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| CursorAnysphereRoles through group mapping only. Groups are read-only in Cursor. | Token from the setup wizard | Enterprise with active SSO | Yes | Usable per vendor documentation | Vendor docs for Cursor |
| Devin Desktop (formerly Windsurf)CognitionWith a setting: group PATCH and group DELETE address the group name in the path instead of the id. | Bearer | Enterprise | Yes | Per vendor documentation, with a setting | Vendor docs for Devin Desktop (formerly Windsurf) |
| Hugging Face Enterprise HubHugging FaceCaution: Under Managed SSO, DELETE irreversibly deletes the account and its content.Full lifecycle with Enterprise Plus only. | SCIM token, header format not stated | Enterprise or Enterprise Plus | Yes | Usable per vendor documentation | Vendor docs for Hugging Face Enterprise Hub |
| LangfuseCaution: Accounts only, no groups.With a setting: sign-in through Basic instead of bearer; PATCH only replace on active, attributes through PUT only. | Basic with API key | Enterprise | No | Per vendor documentation, with a setting | Vendor docs for Langfuse |
| LovableActive SSO, verified domain and mapped groups required. | Bearer | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Lovable |
| Weights & BiasesCoreWeave (Weights & Biases)Caution: active=false removes the user from the organization, no reactivation (multi-tenant).Path without /v2. Groups are teams. | Bearer or Basic with API key | not stated | Yes | Usable per vendor documentation | Vendor docs for Weights & Biases |
Communication and collaboration
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| CalendlyFew attributes only. Provisioning fails when all seats are taken. | Bearer token, expiry selectable | Enterprise; SAML SSO required | Yes | Usable per vendor documentation | Vendor docs for Calendly |
| CanvaWith a setting: no DELETE /Users, delete as deactivate needed. | Bearer | Enterprise or Canva for Education | Yes | Per vendor documentation, with a setting | Vendor docs for Canva |
| FigmaCaution: active=false removes the user from the organization.Tenant ID in the path. Groups bind to the workspace of the same name. | Bearer | Organization, Enterprise, Government, Education (K-12) | Yes | Usable per vendor documentation | Vendor docs for Figma |
| GuruCaution: Removal deletes immediately.No invitations in the web app after activation. | SCIM username and SCIM token | not stated; SSO required | Yes | Usable per vendor documentation | Vendor docs for Guru |
| Lucid (Lucidchart, Lucidspark)Lucid SoftwareTwo integrations with their own tokens: Admin Management and Content Access. | Bearer | Enterprise | Yes | Usable per vendor documentation | Vendor docs for Lucid (Lucidchart, Lucidspark) |
| MuralCaution: DELETE /Users is irreversible.With a setting: remove members through path members with a value array instead of members[value eq]. | Company admin key, header format not stated | Enterprise, SAML SSO | Yes | Per vendor documentation, with a setting | Vendor docs for Mural |
| OX App SuiteOpen-XchangeSelf-operated, from middleware 8.54. DELETE deactivates by default. | Bearer or Basic | not stated; middleware from 8.54, self-operated | Yes | Usable per vendor documentation | Vendor docs for OX App Suite |
| SlackSalesforce (Slack)DELETE only deactivates. Parallel changes to the same object return 429. | Bearer (OAuth token with scope admin) | Business+ or Enterprise | Yes | Usable per vendor documentation | Vendor docs for Slack |
| VimeoOwner ID in the path. Token from your own API app. | Bearer token from your own Vimeo API app with scopes Private and SCIM | Enterprise; Account Owner only | Yes | Usable per vendor documentation | Vendor docs for Vimeo |
| WebexCiscoOrgId in the path. Token from a service app. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for Webex |
| WireWire Swiss / Wire GermanyWith a setting: only PUT with the complete object is documented, missing fields become null. | Bearer | not stated | Unclear | Per vendor documentation, with a setting | Vendor docs for Wire |
Customer service and telephony
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| FrontCaution: Accounts only, no groups.With a setting: update through PUT, ServiceProviderConfig reports patch false. | Bearer | Request access from the vendor | No | Per vendor documentation, with a setting | Vendor docs for Front |
| IntercomCaution: No disabled state: inactive means permanent deletion in the workspace.Groups on roles and seats only. Separate base URL per workspace. | API token from the settings | Plan with SCIM; SAML SSO | Yes | Usable per vendor documentation | Vendor docs for Intercom |
| NICE CXoneNICERegional base URL, with a bearer token /oauth/scim/v2. New users get the Agent role. | Bearer token or OAuth 2.0 | not stated | Unclear | Usable per vendor documentation | Vendor docs for NICE CXone |
| TalkdeskCaution: DELETE is permanent. Accounts only, no groups.Limit of 4 requests per second. No Talkdesk Phone users. | OAuth client credentials | not stated; scope scim and free licenses | No | Usable per vendor documentation | Vendor docs for Talkdesk |
HR and learning
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| Absorb LMSAbsorb SoftwareDELETE is a soft delete. No bulk. | OAuth authorization code or long-lived bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for Absorb LMS |
| LatticeCaution: Accounts only, no groups.The unique identifier is externalId. | API token, can only be generated by a Lattice super admin | not stated | No | Usable per vendor documentation | Vendor docs for Lattice |
Security and network
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| Akamai Enterprise Application AccessAkamaiDirectory type SCIM with schema Generic. The provisioning key serves as the token. | Bearer | not stated | Yes | Usable per vendor documentation | Vendor docs for Akamai Enterprise Application Access |
| GitGuardianGroups become teams. Unlinked members stay outside SCIM. | Service account token with members:write and teams:write | not stated; SSO first | Yes | Usable per vendor documentation | Vendor docs for GitGuardian |
| Rapid7 Command Platform (InsightVM)Rapid7With a setting: DELETE on users is not listed, delete as deactivate needed. | Bearer with the API key of a platform admin user | not stated; platform admin required | Yes | Per vendor documentation, with a setting | Vendor docs for Rapid7 Command Platform (InsightVM) |
| TinesCaution: A missing userType can revoke tenant owner permissions.userName must be an email address. Activation blocks invitations and user changes in the interface. | Bearer | Not on all plans, enabled by Tines | Yes | Usable per vendor documentation | Vendor docs for Tines |
Sales and marketing
| Application (vendor) | Sign-in | Plan per vendor | Groups | Status | Source |
|---|---|---|---|---|---|
| AttioFour user attributes only. | Bearer, developer token with User Management read-write | Enterprise, verified domain | Yes | Usable per vendor documentation | Vendor docs for Attio |
| CleverTapPath /nx/v2/scim/v2. One token per account, valid for one year. | Bearer | not stated | Unclear | Usable per vendor documentation | Vendor docs for CleverTap |
| Customer.ioCaution: Accounts only, no groups.SAML SSO required. Roles in Customer.io only. | Token in the Authorization header, scheme not stated | not stated; SAML SSO required, account admin | No | Usable per vendor documentation | Vendor docs for Customer.io |
| GainsightWith a setting: no DELETE documented, delete as deactivate needed. | OAuth client credentials | not stated; write access for super admins only | Yes | Per vendor documentation, with a setting | Vendor docs for Gainsight |
| HubSpotOnly one SCIM app per account. Teams cannot be assigned through SCIM. | not stated | Professional or Enterprise, SSO must be active | Unclear | Usable per vendor documentation | Vendor docs for HubSpot |
| KlaviyoCaution: Accounts only, no groups.Key with the prefix Klaviyo-API-Key. Every account needs a role. | Bearer | Paid plan or Portfolio, SSO must be active | No | Usable per vendor documentation | Vendor docs for Klaviyo |
| PlanhatCaution: Removal from the last mapped group deactivates the user.Groups serve as role mapping. | Bearer token from Global Tool Settings > User Provisioning | not stated | Yes | Usable per vendor documentation | Vendor docs for Planhat |
| SeismicPATCH only replace, path mandatory. | JWT bearer with scopes seismic.user.view / seismic.user.manage | not stated | Unclear | Usable per vendor documentation | Vendor docs for Seismic |
| Shopify PlusShopifyCaution: Accounts only, no groups.Groups only through the roles array in the body, not as a resource. | API token from Settings > Users > Security | Shopify Plus; verified domain and SAML | No | Usable per vendor documentation | Vendor docs for Shopify Plus |
The list is not a market overview. If an application is missing, that says nothing against SCIM: often a general SCIM 2.0 endpoint simply could not be verified from the public documentation. Talk to us about it. Where a document does not state the version literally, SCIM 2.0 is inferred from the /scim/v2 endpoint or the schema URN.
More in the catalog
Related integrations
All product names, logos and brands mentioned are property of their respective owners. They are referenced solely to describe the vendor documentation and do not imply any partnership or endorsement.
Next step
Ask your questions live on the system.
In a 30-minute video call we show you the functions for your use cases on the demo system.
Request a demoWhat happens next
- ReplyWe usually get back to you on the same working day and agree a date with you.
- PreparationWe prepare the demo around the topics you name.
- 30 minutes via video callLive on the demo system with fictitious data. We show the views you ask about.