SCIM provisioning

SCIM (System for Cross-domain Identity Management) automatically provisions and deprovisions user accounts in Tuple when you update them in your identity provider. This eliminates manual user management and ensures access stays in sync.

​

Getting credentials

SCIM credentials are issued per-team. To enable SCIM:

1. Send an email to support@tuple.app requesting SCIM provisioning.
2. Once approved, your credentials appear on the Team Management page.

Your credentials are a SCIM username and a SCIM password. Providers that authenticate with basic auth, like Okta, use them directly. Providers that ask for a single bearer token or secret token, like Microsoft Entra ID and OneLogin, use both values joined with a colon: <SCIM username>:<SCIM password>.

​

Provider-specific guides

​

How SCIM works with Tuple

​

Tuple’s SCIM endpoints

Map userName to the same email address your SAML configuration sends. When the two disagree — for example, SCIM sending a UPN while SAML sends mail — each flow matches a different account and users end up duplicated.

​

Questions?

Email us if you need help setting up SCIM provisioning.