> For the complete documentation index, see [llms.txt](https://docs.cortex.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cortex.io/configure/settings/managing-users/provisioning-users-with-scim/configuring-scim.md).

# Configuring SCIM in Cortex

Before you begin using SCIM to provision users, you must first turn on SCIM in your Cortex workspace. Follow the steps below to turn on SCIM.

1. From the main sidebar, click your avatar in the bottom-left corner.
2. Click **Settings**.
3. From the **Settings** menu, scroll to the **Security and access** section, then select **SCIM**.
4. Toggle on the following settings:

   * **Enable automatic deprovisioning of users** - Cortex automatically deprovisions any user it detects has been removed from your provider instance.
   * **Enable automatic provisioning of users** - Cortex automatically provisions any user it detects has been added to your provider instance.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Enabling automatic provisioning of users may impact seat counts.</p></div>

Each toggle controls a distinct set of SCIM operations:

* **Enable automatic provisioning of users** gates user creation and reactivation. While it is off, your provider cannot create or reactivate users in Cortex.
* **Enable automatic deprovisioning of users** gates user deletion and deactivation. While it is off, your provider cannot delete or deactivate users in Cortex.

A user created or reactivated while automatic provisioning is on is always assigned your workspace's default role. For the API responses returned when a required toggle is off, see the [SCIM API reference](/api/readme/scim.md).

{% hint style="info" %}
Track provisioned and deprovisioned users in the [Cortex audit logs](/configure/settings/audit-logs.md). Access the logs from the **Settings** menu. Scroll to the *Logging* section, then select **Audit logs**.
{% endhint %}

For an overview of the complete SCIM provisioning workflow, see [Okta SCIM Configuration](/configure/settings/managing-users/provisioning-users-with-scim/okta-scim.md) or [Microsoft Entra ID SCIM Configuration](/configure/settings/managing-users/provisioning-users-with-scim/entraid-scim.md).