SCIM Provisioning
SCIM 2.0 enables automated user and group provisioning from your directory service. When employees join, move, or leave your company, their Clevername access is automatically updated.
What is SCIM?
SCIM (System for Cross-domain Identity Management) is a standard protocol for automating user provisioning. When connected to your directory service (Google Admin, Okta, Azure AD, etc.), SCIM automatically creates, updates, and deactivates Clevername accounts as your employee directory changes.
Supported operations
- Users — create, update, deactivate, list, get by ID
- Groups — create, update membership, delete, list, get by ID
Endpoint and authentication
Clevername's SCIM 2.0 endpoint ishttps://clevername.net/api/scim/v2. Authentication uses a bearer token generated in your org settings. The token is passed via theAuthorization header.
Generate a SCIM token
Go to Organization → Settings → SCIM. Click Generate Token. Copy the token immediately — it is only shown once. Store it securely.
Configure your directory service
In your directory service (Google Admin, Okta, etc.), set up a SCIM application with these values:
- Base URL:
https://clevername.net/api/scim/v2 - Bearer Token: the token you generated in step 1
Map user attributes
Most directory services auto-map standard SCIM attributes (email, name, active status). Verify that the following mappings are correct:
userName→ email addressname.givenName→ first namename.familyName→ last nameactive→ account status
Test provisioning
Most directory services offer a test provisioning button. Run it to verify a test user is created in Clevername. Check the Members tab in your org to confirm the user appeared.
Enable automatic sync
Once testing passes, enable automatic provisioning in your directory service. New employees will be added to Clevername automatically, and departing employees will be deactivated when removed from your directory.