Automated user provisioning eliminates the need for companies to manually add users to the CSI User Database via the User Management Dashboard.

CSI supports two types of automatic user provisioning: 1) Just in Time User Provisioning and 2) SCIM User Provisioning. Both user provisioning mechanisms require a federated identity as a prerequisite.

Just in Time (JIT) User Provisioning

Upon a successful federated user authentication, if the user does not exist in the CSI User Database, they will be created on the fly and added to the CSI account associated with your federated identity configuration. The user will be created with the account's default permissions role and will be added to the account's default license group.

JIT user provisioning is most applicable for companies with a single CSI account.

If you are interested in turning on JIT User Provisioning, please email identity@csiamerica.com.

System for Cross-domain Identity Management (SCIM) User Provisioning

System for Cross-domain Identity Management (SCIM) is a set of application-level protocols to securely manage and communicate user data across multiple domains. SCIM clients can be integrated to manage CRUD (create, replace, update, delete) operations on contacts in the CSI User Database. SCIM User Provisioning allows contacts to be synced between a customer's federated identity platform (IdP) and the CSI User Database.

SCIM user provisioning is most applicable for companies with multiple CSI account as SCIM Provisioning allows for users to be mapped to specific CSI Accounts and license groups to ensure they are using the desired CSI License. SCIM User Attributes are used to map users to the correct CSI Account.

SCIM User Provisioning is currently supported for the following identity platforms / standards:

• Microsoft Azure AD / Entra ID
• Okta Workforce Identity Cloud
• OpenID Connect
• SAML

Steps to setup:

1. Identify a user attribute in your identity platform that you want to use for mapping to a CSI Account. This can often be a country, city, or office location. Any SCIM user attribute can be used to map to a CSI Account.
2. Contact CSI Identity at identity@csiamerica.com, to setup and configure.

If you have any questions about SCIM User Provisioning, please email identity@csiamerica.com.