SCIM Provisioning
SCIM provisioning (System for Cross-domain Identity Management) allows VaultysHub to automatically synchronize user accounts and groups with your external applications. Connect VaultysHub to your target application once, and then manage everything from VaultysHub.
Accessing the Provisioning Tab
From the application list, open the action menu, then click on Edit.
On the application page, select the Provisioning tab. You will discover seven management sub-tabs:
| Tab | Role |
|---|---|
| Configuration | Connect VaultysHub to the SCIM endpoint of the target application |
| Accounts | View and manage existing accounts in the target application |
| Access | See VaultysHub users who have access to this application |
| Groups | View and manage groups in the target application |
| Folders | View VaultysHub folders associated with this application |
| Schema | Explore the SCIM schema returned by the target application |
| Settings | Configure provisioning/deprovisioning automations |
SCIM Connection Configuration
Fill in the base URL of your application's SCIM endpoint and the associated authentication token, then click on Save.
Once the connection is established, VaultysHub retrieves the SCIM schema and unlocks the other tabs.
Accounts
The Accounts tab displays all accounts present in the target application. For each account, an icon indicates whether a VaultysHub user is associated with it.
The available actions in the menu for each row:
| Action | Description |
|---|---|
| Create a membership | Creates a new VaultysHub user from the SCIM account data |
| Associate a membership | Associates an existing VaultysHub user with this account |
| Delete | Deletes the account in the target application |
Access
The Access tab lists the VaultysHub users who have access to this application. The Present in {app} column indicates whether a corresponding account exists in the target application.
The available action:
| Action | Description |
|---|---|
| Create an account | Provisions an account in the target application for this VaultysHub user |
Groups
The Groups tab displays all groups existing in the target application. The VaultysHub Folder column indicates whether a VaultysHub folder is associated with this group.
The available actions:
| Action | Description |
|---|---|
| Create a folder | Creates a new VaultysHub folder from this group |
| Associate a folder | Associates an existing VaultysHub folder with this group |
| Delete | Deletes the group in the target application |
Folders
The Folders tab lists the VaultysHub folders that contain this application. The Present in {app} column indicates whether a corresponding SCIM group exists in the target application.
The available action:
| Action | Description |
|---|---|
| Create a group | Provisions a group in the target application for this VaultysHub folder |
Schema
The Schema tab displays the SCIM schema returned by the target application in JSON format. It lists the available attributes for users and groups and serves as a reference for configuring mappings.
Settings
The Settings tab allows you to configure VaultysHub's automatic behavior during access changes. For each of the four events, you choose between three modes:
| Mode | Behavior |
|---|---|
| Manual | No automatic action — you act from the previous tabs |
| Notification | A ticket is created in the VaultysHub messaging system to guide you |
| Automatic | VaultysHub acts directly on the target application without intervention |
The four configurable events:
| Event | Automatic mode |
|---|---|
| A user gains access to the application | Automatically creates an account in the target application (provisioning) |
| A user loses access to the application | Deletes the associated account in the target application (deprovisioning) |
| A VaultysHub user is disabled | Disables the corresponding account in the target application |
| User metadata is updated | Updates the account (first name, last name, email…) in the target application |
