SCIM Provisioning

SCIM 2.0 enables automated user and group provisioning from your directory service. When employees join, move, or leave your company, their Clevername access is automatically updated.

Key Concepts

What is SCIM?

SCIM (System for Cross-domain Identity Management) is a standard protocol for automating user provisioning. When connected to your directory service (Google Admin, Okta, Azure AD, etc.), SCIM automatically creates, updates, and deactivates Clevername accounts as your employee directory changes.

Supported operations

Users — create, update, deactivate, list, get by ID
Groups — create, update membership, delete, list, get by ID

Endpoint and authentication

Clevername's SCIM 2.0 endpoint ishttps://clevername.net/api/scim/v2. Authentication uses a bearer token minted for your company through the company API and shown on the Enterprise setup page. The token is passed via theAuthorization header.

Step-by-Step Guide

Generate a SCIM token

SCIM tokens are minted by an org owner through the company API (POST /api/hub/companies/{company_id}/scim-tokens) and surfaced on the Enterprise → Setup page (/dashboard/enterprise/setup) alongside the base URL. There is no SCIM token control on the org settings page. Copy the token and store it securely.

Enterprise setup page showing the SCIM base URL and the minted SCIM token

The Enterprise setup page shows the SCIM base URL and token. This token authenticates your directory service with Clevername.

Important

If you lose the token, revoke it and mint a new one; the setup page will show the replacement.

Configure your directory service

In your directory service (Google Admin, Okta, etc.), set up a SCIM application with these values:

Base URL: https://clevername.net/api/scim/v2
Bearer Token: the token you generated in step 1

Google Admin SCIM configuration page with Base URL and Bearer Token fields filled in

Enter the Clevername SCIM endpoint and your bearer token in your directory service.

Map user attributes

Most directory services auto-map standard SCIM attributes (email, name, active status). Verify that the following mappings are correct:

userName → email address
name.givenName → first name
name.familyName → last name
active → account status

Test provisioning

Most directory services offer a test provisioning button. Run it to verify a test user is created in Clevername. Check the Members tab in your org to confirm the user appeared.

Tip

Provisioned users appear in the org Members list and on the Enterprise → Userspage. There is no separate SCIM badge; their account is managed by your directory service.

Enable automatic sync

Once testing passes, enable automatic provisioning in your directory service. New employees will be added to Clevername automatically, and departing employees will be deactivated when removed from your directory.

SSO Setup Roles & Permissions Billing & Seats