SCIM provisioning
Inbound SCIM gives identity providers an endpoint and a token. Outbound SCIM pushes changes to the applications your users need, with presets that encode each vendor's quirks so you do not have to.

What connects
Inbound (tested clients)
Outbound presets
How LumoAuth solves it
Inbound endpoint and token
Create a token, copy the base URL, choose default roles and delete behaviour. Docs

Outbound targets
Pick a preset, add the bearer token or OAuth client credentials, choose sync on login, on change or in batches. Docs
Group push
Group membership changes reach downstream apps. Docs
Which plan you need
Inbound SCIM is on every plan. Outbound SCIM is on Business.
Documentation
Ship passwordless sign-in this week. Put guardrails on your agents today.
The Developer plan is free for 10,000 monthly users and ten agents, with no card. Everything speaks open standards, so moving in or out is a config change.