- Docs
- Administration
- Security
- User provisioning (SCIM)
User provisioning (SCIM)
Create, update and suspend users from your identity provider.
Turn on SCIM
On Enterprise, open Settings › Security › Provisioning and select Generate token. The token is shown once; store it in your identity provider with the base URL https://api.hourglass.app/scim/v2.
From then on, users and groups assigned to the Hourglass app are created and updated automatically.
Attribute mapping
userName maps to the person's email, and name.givenName and name.familyName to their name. Groups in your identity provider map to Hourglass teams, and you choose a role per group, so moving someone between groups moves them between teams.
Deprovisioning
When a user is deactivated or unassigned in your identity provider, Hourglass suspends them within 5 minutes: they're signed out and can't sign in. Their open deals, tickets and tasks move to their manager, and their records keep their history. An admin can delete the user later; suspension frees the seat straight away.