What is SCIM and how does it support automated user provisioning?

• A. SCIM is a cryptographic protocol for secure password exchange.
• B. SCIM is a logging framework for access events.
• C. SCIM standardizes provisioning and attribute synchronization across domains, enabling bulk create/update/delete.
• D. SCIM replaces MFA in provisioning.

Answer: (C)

SCIM is a standard for cross-domain identity management that defines how user and group data is exchanged between an identity provider and service providers. It standardizes provisioning and attribute synchronization so identities can be created, updated, or removed automatically across systems, often in bulk.

What makes SCIM effective for automated provisioning is its shared data model and API. It provides a common schema for user and group resources (attributes like userName, name, emails, and memberships) and a RESTful interface, so systems can reliably push or pull account information. It also supports bulk operations for creating, updating, or deleting many accounts at once, and delta provisioning to transmit only changes since the last sync. All of this enables scalable, hands-off provisioning and consistent attribute data across apps.

This isn’t a cryptographic protocol for password exchange, nor a logging framework, and it doesn’t replace multi-factor authentication. MFA remains about verifying who you are during sign-in, while SCIM handles how identities are provisioned and kept in sync across systems.