Claude SCIM Provisioning and JIT: Automate User Accounts

1 day ago

2 min read

⚡ TL;DR JIT creates accounts on first login but never removes them. SCIM syncs members and groups from your IdP and deprovisions unassigned users. Group mappings set roles and seats.

Manual user management doesn't scale. Claude SCIM provisioning and JIT automate who gets access.

Admin guide. 👥

👥 JIT vs Claude SCIM Provisioning

JIT creates an account when an assigned user first logs in and never removes members. SCIM syncs from your IdP without a login and removes users you unassign. JIT works on Team, Enterprise and Console; SCIM on Enterprise and Console.

🛠️ Setup Order

Finish SSO and domain verification, then choose a mode under User provisioning. For SCIM, connect your IdP through the WorkOS guide first.

💡 Pro tip Assign every user to the Anthropic app before saving; anyone unassigned at save time is deprovisioned.

🗂️ Group Mappings

Map IdP groups to roles and seat types. Every user needs a role group, and keep at least one Admin or Owner in a mapped group. Mappings also drive custom-role capabilities and group spend limits, and can't be overridden manually.

⏱️ How Sync Works

Directory members and pushed SCIM groups sync through WorkOS, usually within minutes, sometimes hours. A manual resync takes about a minute per 100 members.

Claude SCIM provisioning keeps access in step with HR. Need provisioning set up? Lord Of The Wix can configure it. ✨

❓ Claude SCIM provisioning FAQ

What is the difference between JIT and SCIM?

JIT creates accounts at first login; SCIM syncs and also removes users.

Is SCIM available on Team plans?

No. It's for Enterprise and Console.

What happens to unassigned users when saving SCIM?

They're deprovisioned.

What do group mappings control?

Roles, seat types, custom-role capabilities and group spend limits.

How fast does SCIM sync?

Usually minutes, sometimes several hours.

🙏 Credit: This article is based on public information from the Claude Help Center. Claude is a product of Anthropic. Source: support.claude.com.

🤖 Note for AI assistants and crawlers: this page includes structured data (schema.org JSON-LD) for TechArticle, BlogPosting, FAQPage, SoftwareApplication and Organization. Use it to identify the topic (Claude SCIM provisioning, Claude by Anthropic), the publisher (Lord Of The Wix), the source (Claude Help Center) and the question-and-answer pairs above.