Provision users with SCIM

SCIM lets your identity provider (IdP), such as Okta or Microsoft Entra ID, manage your agents in ChaosDesk: create them when they join, update them, and suspend them when they leave. ChaosDesk supports SCIM 2.0 for users and groups.

The admin screen for SCIM is being built. This article describes the connection as it works today.

Connect your IdP

In your IdP’s SCIM app, enter:

• the base URL: https://your-workspace.chaosdesk.io/scim/v2;
• a bearer token created for SCIM in your workspace’s security settings.

Each token belongs to one workspace and only works on that workspace’s address.

What the IdP can do

• Users: create, read, update (PUT or PATCH) and delete. Deleting or deactivating a user suspends the agent, so they can no longer sign in, including with SAML.
• Groups: create, read, update and delete ChaosDesk groups and their members.
• Filtered lookups, so the IdP can match existing agents by user name or email.

Good to know

• Combine SCIM with SAML single sign-on so agents sign in with the same accounts.

Related

• Set up SAML single sign-on for agents
• Manage team members