Definition
SCIM (System for Cross-domain Identity Management) is a standard HTTP protocol for managing user accounts across systems. In HR software, it lets a system of record such as an HRIS create, update, and deactivate user accounts in connected applications automatically.
Also known as: System for Cross-domain Identity Management, SCIM provisioning
How it works
SCIM, defined in IETF RFC 7644, provides a standardized service for managing identities in multi-domain scenarios. It rests on a common schema, defined in RFC 7643, so different systems describe users and groups the same way.
A SCIM client, such as an HRIS, sends HTTP requests to a SCIM endpoint on each connected application. Four functions are supported. Create adds a resource to endpoints such as /Users or /Groups. Read retrieves resources, with filtering, sorting, and pagination. Update works through PUT, which replaces attributes, or PATCH, which applies partial changes. Delete removes a resource.
Payloads use JSON with the media type application/scim+json. For HR teams, this means a hire, role change, or termination recorded once can flow to downstream applications without manual account administration.
Example
When a company marks a new hire as active in its HRIS, a SCIM connection creates the employee's accounts in the collaboration and learning tools. When the employee leaves, a delete or deactivate request removes those accounts.
How it differs from similar terms
SCIM vs Single Sign-On. SCIM manages the lifecycle of user accounts, while single sign-on handles the sign-in event itself. Organizations commonly deploy both together.
Free checklist
Buyer's checklist: HRIS Software
Everything to check before you sign with a HRIS provider, on one printable page.
- 9 questions to ask every vendor, with how to verify each answer
- 11 capabilities to confirm in a demo
- 6 pricing questions about fees outside the quote
- A scorecard of the 5 products we rank highest, with what we verified
Facts as of Oct 24, 2026 · LeadChange Research Team
What it checks
- Employee record model
- Payroll integration
- Onboarding and document management
- Time off and absence rules
- Reporting and data access
- Integration breadth and API
- Permissions and privacy controls
- Employee and manager self-service
and 1 more question in the full checklist
Sample question
Employee record model
Ask to see a rehire and a mid-year transfer, and view the full change history on the record.
Frequently asked questions
What does SCIM do?
SCIM standardizes identity management across systems using an HTTP-based protocol. A source system can create, read, update, and delete user and group records in other applications, which reduces manual account setup and helps keep access aligned with employment status. It relies on a shared schema so systems describe users consistently.
What format does SCIM use?
SCIM exchanges data as JSON, identified by the media type application/scim+json. Each resource lists the applicable SCIM schema URIs, and attribute definitions follow the core schema in RFC 7643, including characteristics such as mutability and cardinality. Requests are sent over HTTP to endpoints on each connected application.
How is SCIM different from SSO?
SSO authenticates a user at sign-in. SCIM provisions and deprovisions the accounts that user signs in to. SCIM answers whether an account exists and what attributes it holds, while SSO answers whether the person is who they claim to be.
What is the difference between SAML and SCIM?
SAML handles sign-in: it lets an identity provider vouch for a user so an application can let that user in. SCIM handles accounts: it creates, updates and deactivates the user records themselves in each connected application. Companies often use both, SAML for single sign-on and SCIM for provisioning.
Is Okta a SCIM provider?
Okta is an identity provider that can send account changes to applications over SCIM. 15Five, for example, accepts user management from any identity provider that supports SCIM 2.0 and names Okta, Azure, OneLogin and Google Workspace (G-Suite).
Which HR software supports SCIM?
Support varies widely. Among the HR products we track, Rippling, Deel, Greenhouse and 15Five state SCIM provisioning on their own pages. If automatic account creation and removal matter to you, confirm SCIM support and the plan it requires before you buy.
Compare HRIS options
See every HRIS product we rank, with verified prices and features.