A guide that explains the integration of Second Nature with SCIM.

Why Use SCIM?

Using SCIM for identity management offers several key advantages:

• Just-in-Time (JIT) Provisioning: SCIM allows for the automatic creation of user accounts in Second Nature as soon as they are created in your identity provider (IDP). This ensures that new users can immediately access the resources they need without manual intervention.

• Automated User Creation and Updates: With SCIM, user information is automatically synchronized between your IDP and Second Nature. This means that any updates to a user's information, such as a name change or a role update, are reflected in Second Nature without the need for manual updates.

• Automatic Deactivation of Inactive Users: SCIM automatically deactivates users who are no longer active in your organization. If a user leaves the organization, their account in Second Nature will be deactivated, ensuring that only active employees have access to your systems.

Steps to Integrate SCIM with Second Nature

1. Request an API Token from Second Nature:

   1. Every API request must include your API key in the request header.

   2. For authentication info, see here.

2. Configure the SCIM Integration on Your Identity Provider (IDP):

   1. Once you have the API token, proceed to configure a SCIM integration on your IDP. Use the following SCIM endpoint URL:

      1. https://app.secondnature.ai/api/scim/v2

   2. Input the provided API token when prompted.

3. Map Required Attributes:

   1. Ensure that the following attributes are correctly mapped in your IDP to enable a successful integration with Second Nature:

      1. email

      2. given name

      3. family name

      4. manager

4. Optional Attributes: You can also map these optional attributes for enhanced user management in Second Nature:

   1. department: This will be displayed in Second Nature as the user's segment.

   2. division: This will be displayed in Second Nature as the user's region.