Overview
Admin Management Using SCIM enables automated provisioning and deprovisioning of administrator accounts through integration with your identity provider (IdP). SCIM (System for Cross-domain Identity Management) is an open standard protocol that automates the exchange of user identity information between your IdP and Druva.
Key capabilities
This section describes the main features available with SCIM-based admin management.
Centralized Management: Manage all administrator accounts from your identity provider instead of manually creating accounts in Cloud Platform.
Role Synchronization: Map IdP groups to Druva administrator roles for consistent access control.
Real-time Sync: Changes in your identity provider are immediately reflected in the Cloud Platform.
Use case
Admin management using SCIm protocol addresses common identity lifecycle challenges. Use this feature to:
Streamline onboarding: Automatically create administrator accounts when new IT staff join your organization and are added to the appropriate IdP group.
Ensure Enhanced Security: Immediately revoke administrator access when employees leave or change roles, reducing the risk of orphaned accounts.
Reduce manual effort: Eliminate the need to manually create, update, and delete administrator accounts across multiple systems.
Maintain consistency: Ensure administrator roles and permissions align with your organization's identity governance policies.
How it works
This section explains the SCIM integration workflow from initial setup through ongoing synchronization.
Configure SCIM integration between your identity provider and Druva. Generate a SCIM token and enter the SCIM endpoint URL in your IdP.
Assign Administrators to the Druva application in your IdP. Map IdP groups to Druva administrator roles.
Add an Administrator to a mapped group in your IdP. The IdP sends a SCIM request to Druva, which creates the administrator account with the appropriate role.
Remove the Administrators from the group or deactivate them in your IdP. The IdP sends a SCIM request to Druva, which deactivates or removes the administrator account.
Prerequisites
Before configuring SCIM integration, ensure you meet the following requirements:
Ensure your role is Druva Cloud Administrator