22 Oct 2026, 10:07 UTC · 1 question · ID 70eef2aa38db
Who asked
Persona
CIO (Chief Information Officer)
Company
Charles Schwab
Industry
Financial services
Pages visited (1)
/solutions/enterpriseQuestion 1 asked here
Question 1
“How does user provisioning work with SCIM?”
Answer
✕Not answered
The site says users can sign in through an identity provider with enforced two-step login. It never mentions SCIM or automatic user provisioning, how identity provider attributes map to users, teams and roles, or what happens when a user is removed.
Add SCIM provisioning to the Single sign-on card on /security
Who needs it: CIOs and IT or security reviewers checking a vendor (this visitor: Charles Schwab)
What is missing
SCIM or automatic user provisioning is not mentioned.
Which identity providers support provisioning is not stated.
How identity provider attributes map to Hourglass users, teams and roles is not explained.
What happens to a deprovisioned user's access and records is not stated.
Which plans include provisioning is not stated.
Where
Update this section: extend the "Single sign-on" card beside "Field-level permissions" and "Audit history". The section also appears on /solutions/enterprise.
What to do
Confirm with product and the security team whether Hourglass supports SCIM, which identity providers and plans it covers, and how deprovisioning handles records.
Add a line on provisioning and deprovisioning to the card, with a link to the setup documentation if it exists.
Done when: /security and /solutions/enterprise say whether users can be provisioned automatically, from which identity providers, and what happens when a user is removed.
Add user provisioning across units to /solutions/enterprise
Who needs it: CIOs and IT admins at large organizations (this visitor: Charles Schwab)
What is missing
How users are created and assigned to brands, regions or business units automatically is not explained.
How identity provider groups map to unit permissions and roles is not stated.
Where
Update this section: add a bullet under "Many teams, one platform" beside "Pipelines, permissions and reports per unit".
Related sections
Security and control, built into every hub
What to do
Confirm with product how provisioned users and groups map to business units, teams and roles.
Add a bullet on provisioning users into units and link it to the provisioning detail on /security.
Done when: /solutions/enterprise explains how users are provisioned into each brand, region or business unit. Depends on: “Add SCIM provisioning to the Single sign-on card on /security”
Answer full page
You turn on SCIM in your workspace's security settings and point your identity provider at the Hourglass SCIM endpoint. Attributes from your identity provider map to Hourglass users, teams and roles, and the docs explain what happens to a person's records when they are removed. The linked docs walk through each step.