Skip to main content
Before you begin using SCIM to provision users, you must first turn on SCIM in your Cortex workspace. Follow the steps below to turn on SCIM.
  1. From the main sidebar, click your avatar in the bottom-left corner.
  2. Click Settings.
  3. From the Settings menu, scroll to the Security and access section, then select SCIM.
  4. Toggle on the following settings:
    • Enable automatic deprovisioning of users - Cortex automatically deprovisions any user it detects has been removed from your provider instance.
    • Enable automatic provisioning of users - Cortex automatically provisions any user it detects has been added to your provider instance.
    Enabling automatic provisioning of users may impact seat counts.
Each toggle controls a distinct set of SCIM operations:
  • Enable automatic provisioning of users gates user creation and reactivation. While it is off, your provider cannot create or reactivate users in Cortex.
  • Enable automatic deprovisioning of users gates user deletion and deactivation. While it is off, your provider cannot delete or deactivate users in Cortex.
A user created or reactivated while automatic provisioning is on is always assigned your workspace’s default role. For the API responses returned when a required toggle is off, see the SCIM API reference.
Track provisioned and deprovisioned users in the Cortex audit logs. Access the logs from the Settings menu. Scroll to the Logging section, then select Audit logs.
For an overview of the complete SCIM provisioning workflow, see Okta SCIM Configuration or Microsoft Entra ID SCIM Configuration.
Last modified on September 9, 2026