Solutions Integration

SCIM provisioning

Inbound SCIM gives identity providers an endpoint and a token. Outbound SCIM pushes changes to the applications your users need, with presets that encode each vendor's quirks so you do not have to.

app.lumoauth.dev
Outbound SCIM targets

What connects

Inbound (tested clients)

OKOkta MIMicrosoft Entra ID ONOneLogin JUJumpCloud ANAny SCIM 2.0 client

Outbound presets

OKOkta MIMicrosoft Entra ID ONOneLogin JUJumpCloud GOGoogle Workspace SASalesforce GIGitHub Enterprise Cloud SLSlack ZOZoom ATAtlassian Cloud GEGeneric SCIM 2.0

How LumoAuth solves it

Inbound endpoint and token

Create a token, copy the base URL, choose default roles and delete behaviour. Docs

app.lumoauth.dev
Inbound SCIM settings

Outbound targets

Pick a preset, add the bearer token or OAuth client credentials, choose sync on login, on change or in batches. Docs

Group push

Group membership changes reach downstream apps. Docs

Which plan you need

Inbound SCIM is on every plan. Outbound SCIM is on Business.

See all plans and add-ons

Documentation

Ship passwordless sign-in this week. Put guardrails on your agents today.

The Developer plan is free for 10,000 monthly users and ten agents, with no card. Everything speaks open standards, so moving in or out is a config change.