
## Crowd User Management at your fingertips 🙌

Hello Crowd Admins!

An acronym for System for Cross-domain Identity Management, SCIM is an open standard that helps in automating the user identity lifecycle management process.

That’s the industry definition, sounds complicated! Let’s see if we can simplify it a bit with the help of this article. It’s all about ‘identity and access management (IAM),’ the concept has been around for quite some time. Think about if you are able to create a user account in one system and matching accounts automatically get created in other systems the user needs access to.

Sounds amazing but it’s not so simple as each system may have its own unique connection methods such as LDAP, SQL, ADSI, custom APIs, etc. That’s where SCIM comes into the picture, it is designed to make managing user identities in cloud-based services and applications easier, but before we go further let’s dive into…

### Why SCIM? {#why-scim}

Instead of the ‘what’ let’s begin with the ‘why.’ We use different cloud-based SaaS applications such as Salesforce, Zendesk, GitHub, Trello, etc. in our daily work routine depending on our role. These applications were assigned to us when we initially joined. This is done by the IT Admin of the company, now think for a minute if a company has less than 10 employees, manually adding them to the application might work but what if the size of the company runs into hundreds or thousands, the task becomes challenging. And, what about when an employee leaves or is terminated from the company they are removed from the company’s employee directory and all access revoked?

The crowd is the tool given by Atlassian which manages users and groups for all Atlassian apps. Crowd is a centralized directory and the access and authorization to Jira, confluence applications are very much dependent on Crowd.

We are pleased to present to you the app that aims to solve your most complex problem. Syncing & Managing users in a crowd is now a problem of the past! Introducing the miniOrange [Crowd SCIM Plugin](https://marketplace.atlassian.com/apps/1229918/mo-scim-provisioning-user-group-sync-for-crowd?hosting=datacenter&tab=overview) 🎉

The Crowd SCIM plugin connects Crowd with your Identity Provider. You can connect different Identity Providers such as Okta, Azure AD, Onelogin, Keycloak, G Suite and any SCIM Supported IDPs for provisioning. Unleash the true potential of Crowd giving you access to features like:-

**Provision & De-Provision users 🔁**

Easily provision and de-provision users in Crowd in sync with your Identity Provider.

**Update/Activate/Deactivate users ✅**

Automatically update the details of users, and activate and deactivate user accounts (If deleted or deactivated in IDP) to save extra license costs and improve the security of your organization.

**Real-Time Provision Users 🚀**

As soon as a user is created on your Identity Provider, it will automatically be created in Crowd, in REAL TIME!!!!

**IDP App-specific provisioning 🖥️**

You can choose provisioning features based on your configured IDPs. Isn’t that great?

**Transform username based on regex for matching user 🧑‍**

Do your users have different usernames in your IDP and different usernames in Crowd? We’ve got you covered. This feature will allow you to transform the username received from the IDP and create or update the desired username in Crowd.

![Crowd User Management Sync](https://miniorange.com/atlassian/wp-content/uploads/sites/14/2023/01/Crowd-SCIM.webp)

I hope you enjoy this plugin as much as we did while creating it. While this is what we’re offering now, here’s our roadmap for the next release:

-   Upcoming Features 🛣️

-   Scheduled Provisioning

-   Filter users by groups for assigning

-   Manual user sync button

-   Sync/update users upon successful authentication

Feel free to reach out to us at [atlassiansupport@xecurify.com](mailto:atlassiansupport@xecurify.com) for a free demo, setup, or any custom use case. We’re happy to help 😄

Try the miniOrange Crowd SCIM plugin today!


Use Crowd SCIM to sync your users, groups and directories with SCIM for Server/DC. Support for Azure AD, Okta, Onelogin, Oracle IDCS, ... IDPs

Crowd User Management at your fingertips


As organizations grow and integrate multiple SaaS applications into their tech stack, managing user identities across systems becomes increasingly complex. Ensuring secure, compliant access to sensitive corporate data—while streamlining user provisioning and deprovisioning—is essential for operational efficiency. To address these challenges, organizations are increasingly turning to SCIM provisioning.

This blog will delve into SCIM provisioning, its key features, and how miniOrange supports both [SCIM and SAML protocols in its solutions](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso) to streamline identity management and secure user access.

### What is SCIM Provisioning? {#scim-provisioning}

[SCIM (System for Cross-domain Identity Management)](https://scim.cloud/) provisioning is an open standard that automates the exchange of user identity information between identity providers (IdPs) and service providers (SPs). It simplifies user lifecycle management—provisioning, updating, and deprovisioning users across multiple SaaS applications—ensuring secure, consistent, and efficient access control.

By leveraging SCIM, organizations can reduce manual administrative tasks, improve security, and maintain compliance by automatically syncing user attributes and access permissions across their tech ecosystem.

Any changes made in the IDP—such as creating, updating, or deleting user accounts or groups are automatically synchronized across all connected platforms in real time.

### Why is SCIM the Best Choice? {#why-is-scim}

SCIM provisioning offers several advantages, making it a preferred solution for identity management:

**\- Automation** : Eliminates manual tasks by streamlining user provisioning and deprovisioning, reducing errors, and saving time.

**\- Standardization** : Provides a consistent protocol for exchanging identity data, ensuring seamless integration across multiple platforms.

**\- Enhanced Security** : Maintains up-to-date access controls, minimizing the risk of unauthorized access and strengthening overall security.

**\- Scalability** : Efficiently manages thousands of users, making it ideal for enterprises with large workforces.

**\- Cost Efficiency** : Automation reduces administrative overhead, leading to significant cost savings.

### Key Features of SCIM Provisioning {#key-features}

SCIM provisioning offers robust features designed to simplify and enhance identity management:

**\- User Lifecycle Management** : Automates the creation, modification, and deletion of user accounts across systems.

**\- Real-Time Synchronization** : Instantly updates user data across all connected platforms, ensuring consistency.

**\- Seamless Compatibility** : Uses standardized protocols to enable smooth integration between identity providers and service providers supporting SCIM.

**\- Enhanced Security & Compliance** : Securely exchanges identity information while adhering to regulatory standards.

**\- Cross-Domain Integration** : Synchronizes user data effortlessly across multiple domains for streamlined identity management.

### Seamless Identity Management with SAML + SCIM App by miniOrange for Atlassian {#saml+scim}

miniOrange simplifies identity and access management for Atlassian environments with its Jira & Confluence [Single Sign-On (SSO) and SCIM provisioning](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso)app.

**Core Features of the miniOrange SAML & SCIM App**

**Seamless User Management with SCIM & JIT Provisioning:**

**\- SCIM User Sync & Provisioning** : Automates user identity synchronization from Identity Providers (IdPs) to Jira, handling user creation, updates, and deactivation in real time.

**\- Just-In-Time (JIT) Provisioning** : Automatically creates users and groups in Jira upon their first login, eliminating manual onboarding.

**Flexible Authentication & Access Control:**

**\- Multi-IDP Support** : Integrates seamlessly with leading Identity Providers like Okta, Azure AD, OneLogin, Keycloak, and more, providing flexible authentication options.

**\- Advanced Login Flow Control** : Enforce granular access policies, set up custom login redirections, and apply advanced authentication rules for a secure, tailored login experience.

**Enhanced Security & Compliance:**

**\- Single Logout (SLO)** : Ensures users are fully signed out from all connected applications when they log out, enhancing security.

**\- Header-Based Authentication** : Supports secure authentication for applications requiring custom header-based login methods.

**\- 2FA/MFA Integration** : Strengthens authentication by incorporating Two-Factor (2FA) or Multi-Factor Authentication (MFA) directly with Identity Providers.

miniOrange’s SAML & SCIM solution provides a **comprehensive, secure, and automated** approach to identity management within Atlassian environments, streamlining user access while enhancing security.

### Optimized for Atlassian Data Center Deployments {#data-center-deployment}

The miniOrange SAML & SCIM app is designed to meet the demands of Atlassian Data Center environments, ensuring:

**\- High Availability** : Built to support active-active clustering, preventing downtime and ensuring continuous authentication services.

**\- Scalability** : Handles large user bases efficiently, making it ideal for enterprises with thousands of users.

**\- Performance Optimization** : Maintains fast authentication and provisioning speeds, even during peak loads.

**Get Started with miniOrange**

Book a free demo of the miniOrange SAML & SCIM app today!

For more details or inquiries, contact us at **info@xecurify.com**, and our team will be happy to assist you.

### Frequently Asked Questions About SCIM {#faq}

**What does SCIM stand for?**

SCIM stands for **System for Cross-domain Identity Management**, a standardized protocol designed to automate user provisioning and identity synchronization.

**How is SCIM different from API-based provisioning?**

Both SCIM and API-based provisioning automate identity management, but SCIM follows a **standardized framework** specifically for identity synchronization, making integrations easier and more consistent. API-based provisioning, on the other hand, offers broader functionality but often requires **custom development** and ongoing maintenance.

**Is SCIM secure?**

Yes, SCIM is designed with security in mind. It **encrypts data during transmission** and follows industry best practices to ensure secure identity synchronization while maintaining compliance with regulatory standards.

**Can SCIM handle mismatched usernames between Identity Providers (IdPs) and service providers?**

Yes! miniOrange’s **Crowd SCIM Plugin** includes **regex-based username transformation**, allowing seamless mapping of mismatched usernames between IdPs and Atlassian applications.

**Does miniOrange offer advanced group management features beyond Atlassian's built-in SCIM?**

Yes, miniOrange provides **manual group mapping**, allowing administrators to link specific IdP groups to Jira groups. Unlike standard SCIM, which only supports **automated group sync**, miniOrange offers **granular control** over user access, ensuring the right users are assigned to the correct projects and resources.

**Can miniOrange sync custom user attributes to Jira beyond Atlassian’s standard SCIM fields?**

Absolutely! miniOrange supports **custom attribute mapping**, enabling you to sync additional user attributes—such as **department codes, employee IDs, or job roles**—from your IdP to Jira. This allows for **personalized user experiences** and improved automation, features that Atlassian’s native SCIM may not support. 

### Useful Links {#useful-links}

For more information on miniOrange’s offerings:

1\. [SCIM Provisioning Atlassian Plugin Marketplace](https://marketplace.atlassian.com/search?query=scim%20provisioning) 

2\. [SCIM miniOrange Webpage](https://www.miniorange.com/atlassian/atlassian-user-and-group-sync)

3\. [SAML SSO Landing Page](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso)

4\. [SAML SCIM SSO Atlassian Marketplace Page](https://marketplace.atlassian.com/search?query=Saml%20SCIM)

5\. [Client Success Story - T- Mobile](https://www.miniorange.com/atlassian/scim-with-native-sso-for-t-mobile)







Discover the benefits of SCIM provisioning for your Atlassian environment. Automate user management, improve security, and simplify access with miniOrange.

Unlock SCIM Provisioning for Effortless and Secure User Management in Atlassian


**What is Bulk User Management ?**

Handling multiple users, activating and deactivating them seems to be a difficult process. The process of deactivating the inactive users to save licensed users might also seem to be a very tedious task as one would have to go through a whole process to first filter out the inactive users and then select each user individually and then deactivate them.

This is where the [miniOrange Bulk User Management](https://marketplace.atlassian.com/search?query=bulk%20user%20management%20miniorange) comes into play and reduces this whole process into a few simple steps.

It is available for [JIRA](https://marketplace.atlassian.com/apps/1224360/mo-bulk-user-management-deactivate-inactive-users-for-jira?hosting=datacenter&tab=overview), [Confluence](https://marketplace.atlassian.com/apps/1224482/deactivate-inactive-user-bulk-user-management-for-confluence?hosting=datacenter&tab=overview), [Bitbucket](https://marketplace.atlassian.com/apps/1227093/deactivate-inactive-user-bulk-user-management-for-bitbucket?hosting=datacenter&tab=overview) and [Crowd](https://marketplace.atlassian.com/apps/1225025/mo-bulk-user-management-for-crowd?hosting=server&tab=overview).

### Handle Multiple Users At Once? {#handling-multiple-users}

Bulk User management helps you to administer users (effectively manage users), with which you can also automatically deactivate or discontinue inactive users, this makes it cost effective by saving your licensed user count. Bulk user actions allow you to perform changes on several users at once, such as adding them to a group or deleting all users of a specific group along with many other features.

![Bulk User Management](/blog/assets/2023/bulk-user-management.webp)

### What is the use of Bulk User Management? {#bulk-user-management-usecase}

To show you the importance of Bulk User Management here is an example.  Let’s say a company has a total of 500 employees. The admin might want to activate, deactivate or delete some users. But that would be a tedious task as the admin would have to select a single user every time to deactivate, activate or delete a user. To perform this action he will have to look for the user by searching his or her username and then go to the information of the user and then from the various options choose the option to delete/activate or deactivate the user. Then press on the confirm pop up box and after this long process the action is performed. While the inbuilt user management of Atlassian is very good, it doesn’t provide the feature to delete/activate or deactivate multiple users which would in turn help the admin administer the users and also prevent wastage of time. 

It basically allows the admin to perform operations in bulk on users in one go directly from the view users page without selecting every single user individually.

Now it might be briefly clear as to why you need miniOrange’s Bulk User Management plugin. **But this is not where the features of our Bulk User Management plugin seizes.**

&nbsp;&nbsp; 

With our plugin you can deactivate users who haven’t logged in to their account for a particular amount of days. Let’s say you want users who haven’t logged in for 20 days to be deactivated, all you have to do is enable the auto deactivate users button and the users who haven’t logged in for 20 days will be deactivated. 

We also have a scheduler which deactivates users. The scheduler runs after every certain number of days selected by the admin and hence the process would be performed after every cycle is complete and thus automate the whole process.

One can also add or remove users from a particular group. Let’s say the admin wants to remove 5 users from jira software users group and wants to add 2 users to jira administrators group, with the help of Bulk User Management he can do it within a few seconds by selecting all of them at once and selecting the group in which he wants to add or remove the users from.

An additional feature of exporting and importing users is also provided. Users can be exported in CSV.

If the admin wants an overview of all the actions he or she performed all they have to do is go to Audit logs and check the actions they have performed. It gives a detailed view of the action performed, when it was performed (date and time), on whom it was performed on (username), their IP address and whether the action performed on the user was manual or automatic.

### Bulk User Management Features {#bulk-user-management-features}

- Automatically Manage your Jira license by deactivating the user at the right time
- Bulk Delete users / Deactivate Inactive users and save user licenses for Jira
- Bulk Activate Users and Auto user deactivator for Jira.
- Export/Import users for Jira in CSV
- Remote external directories supported
- Search users by Inactive/Active/All users filter.
- Search users by filter groups, name, emails etc.

&nbsp;&nbsp; 

You can try our [Bulk user Management](https://marketplace.atlassian.com/search?query=bulk%20user%20management%20miniorange%20) Add-on for [Jira](https://marketplace.atlassian.com/apps/1224360/mo-bulk-user-management-deactivate-inactive-users-for-jira?hosting=datacenter&tab=overview), [Confluence](https://marketplace.atlassian.com/apps/1224482/deactivate-inactive-user-bulk-user-management-for-confluence?hosting=datacenter&tab=overview), [Bitbucket](https://marketplace.atlassian.com/apps/1227093/deactivate-inactive-user-bulk-user-management-for-bitbucket?hosting=datacenter&tab=overview) and [Crowd](https://marketplace.atlassian.com/apps/1225025/mo-bulk-user-management-for-crowd?hosting=server&tab=overview). 

With immense customer support, we are here to help you with everything! Let us know your requirements at [info@xecurify.com.](mailto:info@xecurify.com)

Effortlessly manage your users using our Bulk User Management app. Schedule automated operations like deactivation, reactivation, and app access removal. Effectively handle groups and import/export files, including user data. Additionally, Save on expenses by automatically deactivating users when necessary.

Deactivate users

Crowd User Management at your fingertips

Unlock SCIM Provisioning for Effortless and Secure User Management in Atlassian

Want to manage your users through bulk user management?