Add and remove users from the directory you already run
SCIM provisioning connects Manifestly to your identity provider. Assign the app in Okta or Microsoft Entra ID and a Manifestly user is created. Unassign it and their access is removed. No invites to send, no accounts to chase at offboarding.
Offboarding that doesn't depend on someone remembering
Every tool a person has access to is one more place to clean up when they leave. With SCIM, your directory is the source of truth: the same assignment that gives someone Okta access gives them Manifestly, and the same removal takes it away.
- New hires wait for an admin to send an invite
- Leavers keep access until someone notices
- Seats drift from what the directory says
- Assign the app and the user exists in Manifestly
- Unassign and their access is gone the same minute
- Your directory and Manifestly always agree
Connected in three steps
Create a SCIM API key
In your account settings, create a dedicated API key and name it SCIM. It's the bearer token your identity provider will use, and keeping it separate means you can revoke it without touching your other integrations.
Point your IdP at Manifestly
Paste the SCIM endpoint and the key into your identity provider's provisioning settings for the Manifestly app. Okta, Microsoft Entra ID, and any SCIM 2.0 client work the same way.
Assign people
Assign the app to a person or a group in your directory. Each one becomes a Manifestly user, ready to sign in through SSO, with nothing for an admin to do.
Joiners and leavers, handled at the source
SCIM covers the two events that happen for every employee: the day they start and the day they leave. Your identity provider sends each one to Manifestly as it happens.
- Assigned: a Manifestly user is created from the name and work email in your directory.
- Unassigned or deactivated: their memberships in your account are archived, the same path an admin takes when removing a user by hand.
- Recorded: every provisioning event lands in your account's activity log, marked as SCIM.
# New hire assigned in your IdP
POST /scim_v2/Users
Authorization: Bearer <api-key>
{
"userName": "dana@acme.co",
"name": { "givenName": "Dana", "familyName": "Ruiz" },
"emails": [{ "type": "work", "value": "dana@acme.co" }],
"active": true
}
# Offboarded in your IdP
PATCH /scim_v2/Users/4821
{ "Operations": [{ "op": "replace", "value": { "active": false } }] }
# → access removed, activity loggedYou decide where new people land
Provisioned users arrive with the member role: they can take part in any run they're assigned to, but can't create or edit workflows. Create a department named SCIM and that's where they'll land, so you can promote and move people on your own schedule. Without one, they join the account itself.
- Safe by default: no one is provisioned straight into an admin role.
- Users are matched by email, so SCIM and SAML SSO line up on the same identity.
- Your API key users and guest users are never exposed to the directory.
Works with the directory you already have
Manifestly speaks standard SCIM 2.0, so any identity provider with SCIM support can provision users.
SSO decides who gets in. SCIM decides who belongs.
SAML SSO authenticates people against your identity provider, but only for users who already exist in Manifestly. SCIM is the other half: it creates those users ahead of their first sign-in and retires them when they go. Together, your directory controls access end to end, and SCIM is included with SSO on the Enterprise plan.
SCIM provisioning, answered
Other Features
Workflow Customization
Shape exactly how each workflow behaves — logic, data, timing, and documentation.
Assign and Automate
Get the right work to the right people, on schedule — automatically.
Track Progress and Reporting
See what's done, what's late, and what's coming — across every run.
Govern, secure & prove it
SSO, granular permissions, and a complete audit trail — the controls enterprise teams need to run their work and prove how it was done.
Communicate
Keep the conversation — and a permanent record of who did what, and when — in one place.
Trusted by organizations big and small for their recurring workflows
Provision Users From Your Identity Provider
With Manifestly, your team will Never Miss a Thing.