Automatic provisioning (SCIM)
- Organizations with single sign-on can let their identity provider (Okta, Microsoft Entra ID, OneLogin) add people at their domain, update their names, take out people who are deactivated (their flows pass to an admin) and push groups. Make the token in Settings, Single sign-on.
- Only people at the verified domain can be provisioned, and admins are never removed this way.