Import the directory and provision in SCIM

Duration30 minLevelAdvancedOfferModule Intégration

Objectives

• I know where the directory imports are located
• I know how to connect an application to its SCIM endpoint
• I know how to associate existing accounts and groups with VaultysHub users and folders
• I know how to choose between Manual, Notification, and Automatic modes

0 / 4 objectives achieved — check them off as you go through the lesson.

Why it's useful

The lifecycle of an account has two ends. At the entry point, the company's directory already knows who is coming: the directory import avoids re-entering users. At the exit, each application keeps an account open as long as no one deletes it: SCIM provisioning follows what you decide in VaultysHub.

Your turn

Import from a directory

1. Go to Configuration, tab Import, user section. Next to the CSV import of the basic offer, the module unlocks Microsoft Entra ID, Google Workspace, and LDAP.
2. Choose the source that corresponds to your directory and follow the wizard.

note

Directory imports do not yet have a dedicated page in the manual. For the CSV import, see Create users.

Connect an application in SCIM

You need an application that exposes a SCIM endpoint, with its URL and a token.

1. From Applications, open the action menu of the application, click on Edit, then on the Provisioning tab. → SCIM Provisioning
2. In Configuration, enter the base URL and the token, then click on Save. VaultysHub retrieves the schema and unlocks the other tabs.
3. In Accounts, attach each existing account: Associate a membership if it corresponds to a VaultysHub user, Create a membership otherwise.
4. In Groups, do the same with the folders: Associate a folder or Create a folder.
5. In Access and Folders, identify users and folders that do not yet exist in the application, and use Create an account or Create a group.
6. In Settings, choose a mode for each of the four events. Start with Notification to see what VaultysHub would do, then switch to Automatic.

Event	In Automatic mode
A user gains access to the application	Account creation
A user loses access to the application	Account deletion
A VaultysHub user is disabled	Account deactivation
A user's metadata is updated	Account update

caution

In the Accounts and Groups tabs, the Delete action directly affects the target application: the account or group is deleted there.

Check your knowledge

1Which user import remains available without the Integration module?

2What needs to be entered to connect an application in SCIM?

3In Notification mode, what happens when a user loses access to the application?

4A collaborator leaves and you disable their VaultysHub account. What does Automatic mode do?

Key takeaways

• The imports Entra ID, Google Workspace, and LDAP are in Configuration › Import.
• SCIM connects application by application, in the Provisioning tab.
• Start in Notification, switch to Automatic once the associations are verified.

Next lesson: API and webhooks