Skip to content

Introduction

Digidentity as IGA SCIM provider

Identity Governance and Administration (IGA) is a system that helps organisations manage employee digital identities and control access to resources, ensuring security, compliance, and efficient permission management.

The System for Cross-domain Identity Management (SCIM) is an open standard designed to simplify and automate the exchange of user identity information across identity domains or IT systems. SCIM streamlines user provisioning and management by providing a standardised framework for creating, updating, and deactivating user accounts across multiple systems.

SCIM 2.0, the most recent version of the protocol, offers a lightweight and flexible REST-based API to facilitate interoperability between identity providers (IdPs) and service providers (SPs). By leveraging SCIM, organisations can enhance security, reduce manual administrative tasks, and ensure consistent user data across applications and services.

Features of Digidentity's SCIM API

  • Role-Based Access Control (RBAC): Access to Digidentity is granted based on the roles currently assigned to users. User roles can be updated using SCIM Patch Operations (Add, Remove, Replace).
  • User Deactivation and Reactivation: User Digidentity accounts can be deactivated or reactivated using the Disable operation.
  • User Updates: User attributes can be updated by applying SCIM Patch Operations sequentially.
  • Provisioning Direction: The direction of provisioning flows from the IGA system to Digidentity, with the IGA system serving as the source of truth.