Which statement best describes SCIM in provisioning?

• A. It is used to encrypt data in transit between systems
• B. It is used to replace LDAP in all environments
• C. It standardizes provisioning of identities and group memberships across directories and cloud apps
• D. It is a protocol for real-time chat messaging between apps

Answer: (D)

SCIM is a standard for automating the provisioning and ongoing management of user identities and their group memberships across different directories and cloud applications. It provides a common data model and a RESTful API that lets you create, update, and remove user accounts and their group memberships in connected services in a consistent way. This makes it possible for an enterprise identity source (like a directory or identity provider) to automatically provision new hires into SaaS apps, assign them to the right groups, and revoke access when they depart, all with synchronized data across systems.

This isn’t about encrypting data in transit—that’s covered by encryption protocols like TLS. It isn’t about replacing LDAP in every environment, since SCIM focuses on provisioning across cloud apps and services and often works alongside existing directories. And it isn’t a protocol for real-time chat between apps; SCIM isn’t designed for messaging but for standardized identity provisioning and synchronization.