SCIM provisioning
Integrating Deeper Signals with your IdP through SCIM automates user management: users are provisioned, updated and deprovisioned on the platform as they change in your directory.
:::info What is SCIM? System for Cross-domain Identity Management (SCIM) is an open standard for exchanging user identity information between identity providers and service providers. Deeper Signals implements SCIM 2.0 as the service provider. :::
Setup
-
In the Deeper Signals admin app, open Settings → Integrations and create an API key for SCIM. (Account administrator rights are required.)
-
In your IdP (Azure AD / Entra ID, Google Workspace, Okta, ...) add a SCIM provisioning integration with:
Setting Value SCIM base URL https://api.deepersignals.com/api/scim/v2Authentication Bearer token, the API key from step 1 -
Map the attributes below and start provisioning.
Required attributes
| SCIM attribute | Deeper Signals field |
|---|---|
userName | E-mail address (the user's unique identifier) |
name.givenName | First name |
name.familyName | Last name |
externalId | Employee id |
active | Active / deactivated |
Example mapping for Microsoft Entra ID (Azure AD) provisioning:
| Target attribute | Source attribute |
|---|---|
externalId | objectId |
active | Switch([IsSoftDeleted], , "False", "True", "True", "False") |
userName | IIF(IsNullOrEmpty([mail]), [userPrincipalName], [mail]) |
name.givenName | givenName |
name.familyName | surname |
Video walkthrough with Microsoft Entra ID:
How changes map to the platform
| In your IdP | On Deeper Signals |
|---|---|
| User assigned to the app | User created in your account (no assessment assigned yet) |
| Name or e-mail changed | User updated |
externalId changed | Employee id updated; also reachable through GET /user/employee-id/{employee_id} |
| User unassigned or soft-deleted | User deactivated (active: false); their results are kept |
Deactivated users cannot sign in but still appear in exports and analytics. To remove a person completely, use DELETE /users/{user_id}.