Soulanma supports SCIM (System for Cross-domain Identity Management) for automated user provisioning on the Enterprise plan.

With SCIM provisioning, you can:

• ✅ Automatically add users to your Soulanma workspace
• ✅ Automatically remove users when they leave your organization
• ✅ Update user roles (editor/viewer) based on identity provider settings
• ✅ Import existing Soulanma members into your identity provider for centralized management

Supported SCIM providersCopied!Link to this section

Here's a list of the most popular SAML SSO (and SCIM) providers supported by Soulanma, along with detailed setup instructions available through the provided links:

SCIM basics for different providersCopied!Link to this section

While we have detailed documentation for the most commonly used identity providers (Okta, Entra ID, & JumpCloud), there are also some pieces of information that are true for all, and may help you in setting up user provisioning with your SCIM provider:

• SCIM Version: 2.0
• SCIM Base URL: https://soulanma.com/scim-v2/
• Authorization method: Bearer token
• Username: The user’s email address in Soulanma
• Group fetching is not supported.
• Group provisioning is not supported.

User provisioningCopied!Link to this section

There are two cases to consider when provisioning a user.

Provisioning a new userCopied!Link to this section

When creating a new user, if editor is undefined or you do not provide a value, the user will have the default role set in your Soulanma workspace settings.

To set the role explicitly when provisioning:

• true - provisions the user as an editor
• false - provisions the user as a viewer

Updating an existing userCopied!Link to this section

When updating an existing user, if editor is undefined or you do not provide a value, there will be no change to the user's role in Soulanma.

To set the role explicitly when updating:

• true - provisions the user as an editor
• false - provisions the user as a viewer

If you provision with SCIM but prefer managing user roles within your Soulanma workspace, do not specify a value for editor — then any roles defined in Soulanma will be maintained.

If you need any extra assistance getting up and running, contact our Customer Support team. We're always happy to help. 😁

SCIM provisioning FAQsCopied!Link to this section

Does SCIM require SAML to be enabled?Copied!Link to this section

Yes, SCIM provisioning is only available for workspaces that have SAML SSO configured.

What data does Soulanma sync through SCIM?Copied!Link to this section

Soulanma supports the following SCIM request types:

• Create: Automatically adds users to your workspace.
• Deactivate: Automatically removes users from your workspace.
• Update: Updates user roles (editor/viewer) based on your SCIM configuration.
• Import: Optionally pulls existing workspace members into your identity provider for better visibility and management.

Will SCIM remove users immediately if they’re deprovisioned in our IdP?Copied!Link to this section

Yes — when a user is deactivated in your identity provider, Soulanma will automatically remove them from your workspace.

What are "pending" users?Copied!Link to this section

After provisioning a user in your identity provider, you may see them marked as "pending". This happens when a user is provisioned in the IdP but hasn't yet signed in to Soulanma vial SAML SSO.

As soon as they sign in to Soulanma, their account will be created automatically and they’ll be added to your workspace.

What happens to shared content when a user is removed via SCIM?Copied!Link to this section

Any content the user created in shared folders or sections will remain accessible to collaborators, but the user will no longer appear in your workspace.

Can we sync user roles with SCIM?Copied!Link to this section

Yes — if your identity provider supports it, you can assign viewer/editor roles via SCIM attributes. Reach out to us if you'd like guidance on how to configure role mapping.

What if a user already has a Soulanma account?Copied!Link to this section

SCIM will link to the existing account based on email address. If the user was invited manually before SCIM was enabled, they’ll be automatically managed through SCIM going forward.

Can we give admin access to Soulanma via SCIM?Copied!Link to this section

No, admin access must be applied to workspace members directly in your Soulanma workspace settings.