Exploring SCIM Provider

concept australia Updated Sep 10, 2026 1 min read explore-scim-provider.md

The Service Provider provisions users and groups using the SCIM API.

As a SCIM provider, the ServiceNow schemas support SCIM APIs to provision users and groups.

The SCIM provider synchronizes the changes made to identities in the IdP, including creating, updating, or deleting records. These changes are automatically synchronized to the provider according to the SCIM protocol. Also, the IdP can read identities from the provider to add to the IdP directory. The IdP can then detect incorrect values in the provider that could create security vulnerabilities. The synchronization enables end users to have seamless access to applications for which they’re assigned, with up-to-date profiles and permissions.

Configurations for SCIM Provider

To configure the SCIM Provider, perform the following tasks:

Activate the SCIM v2 - ServiceNow Cross-domain Identity Management plugin. To learn more, see Activate the SCIM.
Activate the other plugins that are required for SCIM:
- OAuth 2.0
- REST API Provider
- REST API Access Policy
Add the scim_admin role as part of the SCIM service.

Warning: Grant this role carefully. The scim_admin role is equivalent to giving the user the admin role, where the scim_admin can add or update Personally Identifiable Information (PII).

Tables

Two tables, sys_user and sys_group, contain the SCIM attributes that do not map to existing ServiceNow tables. To learn more about the tables, see the SCIM-specific tables.

40 lines · 2.5 KB Wrap lines

---
title: Exploring SCIM Provider
description: The Service Provider provisions users and groups using the SCIM API.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/identity/explore-scim-provider.html
release: australia
product: Identity
classification: identity
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [SCIM Provider, System for Cross-domain Identity Management \(SCIM\), Identity]
---

# Exploring SCIM Provider

The Service Provider provisions users and groups using the SCIM API.

As a SCIM provider, the ServiceNow schemas support SCIM APIs to provision users and groups.

## Configurations for SCIM Provider

To configure the SCIM Provider, perform the following tasks:

- Activate the **SCIM v2 - ServiceNow Cross-domain Identity Management** plugin. To learn more, see [Activate the SCIM](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/identity/activate-scim-plugin.md).
- Activate the other plugins that are required for SCIM:
- [OAuth 2.0](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/t_SettingUpOAuth.md)
- REST API Provider
- [REST API Access Policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/activate-rest-api-access-policy.md)
- Add the scim\_admin role as part of the SCIM service.

**Warning:** Grant this role carefully. The scim\_admin role is equivalent to giving the user the admin role, where the scim\_admin can add or update Personally Identifiable Information \(PII\).

## Tables

Two tables, sys\_user and sys\_group, contain the SCIM attributes that do not map to existing ServiceNow tables. To learn more about the tables, see the [SCIM-specific tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/api-reference/scim-api.md).