
## Automate User Provisioning in Atlassian apps with miniOrange User Sync {#Automate User Provisioning in Atlassian apps }

Managing user access across multiple Atlassian apps can be a daunting task, especially as your organization scales. Studies show that around [30% of user licenses are unused](https://track.g2.com/resources/license-management-statistics) due to manual deactivation delays, leading to increased costs and security risks. Automating user provisioning can save time, reduce errors, and help manage licenses more efficiently.

One of the most effective ways to streamline user management in Atlassian apps is by leveraging user sync with miniOrange’s SCIM Provisioning, User Sync & Group Sync. This approach not only automates user provisioning but also ensures that users have the correct permissions at all times.

### What is SCIM Provisioning? {#what-is-scim-provisioning}

SCIM (System for Cross-domain Identity Management) is an open standard protocol that automates user provisioning and deprovisioning across cloud applications. It enables seamless synchronization of user identities and attributes between identity providers (IdPs) and service providers.

#### Importance of SCIM in User Management

Managing user identities manually across multiple cloud services can be error-prone and time-consuming. As organizations grow and adopt more SaaS applications, the complexity of user management increases. SCIM simplifies this process by automating the creation, update, and removal of user accounts, improving efficiency.

#### Why SCIM Matters:
    
* Automates user lifecycle management.
* Reduces manual errors and inconsistencies.
* Ensures real-time updates to user access.
* Reduces IT workload, enabling focus on strategic tasks.   

**How SCIM Works in Practice**

SCIM operates by sending HTTPs requests to the connected applications whenever there is a change in the identity provider (IdP), such as the creation, update, or deactivation of a user account. This real-time synchronization ensures that user data and access rights are kept accurate without manual updation.

**Step-by-Step Process:**

* **User Event Trigger:** An event occurs in the IdP, such as adding, updating, or deactivating a user.
* **SCIM API Call:** The SCIM protocol sends a HTTPs request to the connected application.
* **Data Sync:** The application updates the user data, role, or permission based on the received data and sends an unique identifier to the IdP.
* **Confirmation:** The system verifies the update, ensuring that changes are accurately reflected.

You can also configure SCIM for Atlassian Data Center using our [step-by-step guide](https://www.miniorange.com/atlassian/scim-and-rest-api-user-provisioning-documentation). 

**Real-World Example**

Imagine a large enterprise with thousands of employees using Atlassian apps like Jira, Confluence, and Bitbucket. When a new hire joins, the IT team traditionally needs to manually create user accounts, assign appropriate roles, and ensure permissions align with organizational policies. This manual process can take hours or even days.

With SCIM provisioning, when HR adds a new employee to the central identity provider (like Azure AD), SCIM automatically triggers user account creation in all connected Atlassian apps. The new hire has instant access to the necessary tools, improving onboarding efficiency.


### Benefits of Using SCIM Provisioning {#benifits-of-scim-provisioning}

**1.Efficiency and Automation** : Manual user provisioning can take several hours per user, especially in large organizations. With SCIM, the entire process is automated. Once SCIM is configured, users are automatically added, updated, or removed based on changes in the identity provider (IdP).
This means HR teams can onboard new employees without the need for IT intervention, and offboarding becomes seamless, reducing errors and speeding up the entire process.

**2.Improved Security** : Security risks increase when user accounts are not properly managed. Employees who leave the company or change roles may retain access to sensitive data if their accounts are not updated promptly. SCIM automates the deprovisioning process, instantly revoking access when a user’s status changes in the IdP. This eliminates the possibility of orphaned accounts and ensures that only authorized users have access.

**3.Cost Savings** : Unused or inactive licenses can inflate software costs significantly. SCIM ensures that licenses are reclaimed as soon as a user account is deactivated. By automating the removal of inactive accounts, organizations avoid paying for unused seats, optimizing their license management.

**4.Consistency Across Platforms** : One of the biggest challenges in large enterprises is maintaining consistent access policies across multiple applications. With SCIM, changes made in the IdP are propagated automatically to all connected apps. This means role changes, group updates, and user deletions are reflected in every system without manual adjustments.

**5.Real-Time Synchronization** : SCIM ensures that user data across all connected apps is consistently up to date. Whether a user changes their name, department, or role, the changes are instantly reflected in all linked applications, maintaining accurate access control.

**6.Granular Access Control** : SCIM supports the mapping of user attributes and group memberships, allowing precise control over who can access specific resources. This is essential for organizations with complex role hierarchies or multi-departmental structures.

### Use Cases and Scenarios {#use-cases-scenarios}

**1.Onboarding New Employees** : Automate the creation of user accounts when a new hire is added to the IDP. Ensure that all necessary apps are accessible from day one. 

**2.Offboarding Departed Staff** : When an employee leaves, miniOrange userSync automatically deactivates their account and revokes all permissions. This eliminates potential security risks from lingering access.

**3.Departmental Transfers** : When an employee switches departments, their role and access change. miniOrange userSync updates group memberships and permissions, reducing errors.

**4.Temporary Access for Contractors** : Grant temporary access to contractors or consultants, and automatically revoke it after the project ends.

**5.Seasonal Workforce Management** : Efficiently manage accounts for seasonal employees, ensuring they have access during their tenure and are deactivated when not needed.

**6.Emergency Access Revocation** : In case of a data breach or insider threat, instantly disable user accounts to secure sensitive data.

### Why Choose miniOrange for SCIM Provisioning in Atlassian Apps {#why-choose-miniorange}

miniOrange’s [SCIM Provisioning, User Sync & Group Sync for Atlassian Suite](https://www.miniorange.com/atlassian/atlassian-user-and-group-sync) is the preferred choice for automating user provisioning and synchronization in Atlassian environments due to its robust integration with leading identity providers like Azure AD, Okta, OneLogin, and G Suite. 

The platform offers seamless synchronization of users and groups, allowing administrators to manage user accounts from a central identity provider effortlessly. This centralized management reduces errors, saves time, and ensures that all user accounts across Atlassian apps are accurate and up to date.

One of the standout features of miniOrange userSync is its flexible and configurable provisioning options. Administrators can choose between manual, automatic, or on-login synchronization based on their specific needs. 

Whether it’s importing new users, updating existing profiles, or deactivating inactive accounts, miniOrange’s SCIM provides precise control. This flexibility helps organizations maintain a consistent and secure user management process while minimizing manual intervention. 

Check out how miniOrange’s SCIM user provisioning for Atlassian has helped [customers simplify user management](https://www.miniorange.com/atlassian/scim-with-native-sso-for-t-mobile). 

### Features Offered by miniOrange User Sync for Atlassian {#user-sync-features}

[miniOrange’s SCIM User Provisioning](https://marketplace.atlassian.com/apps/1222000/mo-scim-provisioning-user-sync-group-sync-for-jira?hosting=cloud&tab=overview) offers a comprehensive suite of features designed to enhance user provisioning and synchronization within Atlassian apps. Here are the key features that make it an ideal solution:

**1.Seamless Integration with Major IDPs** : Easily connects with Azure AD, Okta, OneLogin, and G Suite for automatic user and group provisioning into Atlassian apps.

**2.Manual Group Mapping** : Unlike Atlassian’s native SCIM which only supports automatic group provisioning based on matching names, miniOrange allows manual group mapping. This ensures users are assigned to the correct groups—even when group names differ between the Identity Provider and Atlassian—offering finer control over role assignments and access levels.

**3.Attribute Mapping** : Map standard attributes like name, email, username, and department from your IDP directly to user profiles in Jira or Confluence.

**4.Custom Attribute Mapping** : Define and map custom user attributes beyond the standard fields. Whether you need to sync titles, locations, or custom-defined fields specific to your workflows, miniOrange supports advanced mapping flexibility.

**5.Flexible Provisioning Modes** : Choose from manual, automatic, or on-login user synchronization to suit your organizational processes. This flexibility allows administrators to maintain control while automating repetitive tasks.

**6.Scheduled and Real-Time Sync** : Enable scheduled syncs for regular updates or real-time provisioning to reflect identity changes instantly across your Atlassian apps.

**7.User and Group Filtering** : Filter which users or groups should be synced based on group memberships or custom filters, helping you target only the users you want to manage in Atlassian.

**8.Manual Sync Option** : An intuitive manual sync button allows admins to quickly trigger a sync in urgent cases—ideal for last-minute user additions or removals.

**9.Sync on Successful Authentication** : Automatically update user details during login events to ensure profiles are always current without requiring manual syncs.

**10.Multiple IDP Support** : miniOrange supports simultaneous connections to multiple identity providers. This is especially helpful for companies operating in hybrid environments or undergoing mergers and acquisitions, where user identities might be managed in more than one IDP.

**11.IDP-Specific Provisioning** : Configure and customize provisioning behavior for each connected IDP. This ensures consistent integration behavior even when working with multiple providers.

By offering these features, miniOrange simplifies user management for Atlassian environments, reducing administrative workload and ensuring that user data stays accurate and up to date.

### Automate User Provisioning in Atlassian Cloud {#atlassian-cloud}

With miniOrange, automating user provisioning in Atlassian Cloud becomes seamless. It continuously synchronizes changes made in your identity provider into Atlassian apps, keeping cloud access always up to date.

#### Key Features 

* **Instant Deprovisioning** : Automatically disable users when deactivated in the IdP.
* **Streamlined User Management** : Manage access, update details, and ensure compliance.
* **Enhanced Efficiency** : Automatically create, update, and delete users based on identity provider data.
* **Zero Prerequisites** : No need for Atlassian Access, making integration smoother.
* **Group Sync Support** : Ensure accurate group memberships in real-time.

### Automate User Provisioning in Atlassian Data Center {#atlassian-DC}

For Atlassian Data Center, miniOrange SCIM provisioning syncs changes from your identity provider to your Atlassian apps with a single click. User directories are synchronized, and users are added to the correct applications automatically.

#### Key Features:

* **Scheduled Synchronization**: Proactively manage user and group updates.
* **Default and Manual Group Mapping**: Ensure appropriate role allocation even if group names do not match between the IdP and Atlassian instance.
* **Multi-IDP Support**: Connect multiple identity providers and maintain consistent user management.
* **Detailed Audit Logs**: Track changes made during user synchronization for compliance purposes.

### Conclusion {#conclusion}

Automating user provisioning is essential for modern enterprises aiming to enhance security, reduce manual effort, and streamline user management. miniOrange’s SCIM provisioning, User Sync, and Group Sync solutions provide a comprehensive and efficient approach to managing users in the Atlassian suite.

Explore miniOrange’s **Automatic User & Group Provisioning** for seamless Atlassian user management. Volume discounts are available for larger user tiers, helping organizations reduce costs while maintaining efficient access management.

Licensing costs are rising, and managing users manually across Atlassian apps is time-consuming and risky. With miniOrange User Sync, you can automate provisioning, deprovisioning, and group assignments in real-time. Eliminate manual errors, reduce IT workload, and ensure only the right users have access. Simplify access management while improving security and cutting costs.

Automate User Provisioning in Atlassian apps with miniOrange User Sync


## SCIM and SAML: Streamline Identity Management & SSO {#seamless-sso-and-identity-management}

In 2024, 90% of organizations faced [issues with identity management](https://www.prnewswire.com/news-releases/new-study-reveals-90-of-organizations-experienced-an-identity-related-incident-in-the-last-year-84-reported-a-direct-business-impact-302156769.html). From onboarding new hires to handling role changes or offboarding employees, these user management processes are often inconsistent, error-prone, and leave room for security vulnerabilities.

This is where SAML single sign on (SSO) and SCIM work together as a complete identity solution. SAML handles secure single sign-on authentication, **while SCIM automates the entire user provisioning**. Thus, making them essential for modern enterprises managing distributed workforces and complex application ecosystems.

Simplify identity and access management with the combined power of SAML SSO and SCIM provisioning. This blog explores the key benefits, real-world use cases, and how miniOrange delivers a unified identity solution for modern enterprises.

### Understanding SAML: How Does SAML Work in Atlassian? {#understanding-saml}

Managing access to multiple tools like Jira, Confluence, and Bitbucket can quickly get overwhelming. Especially when your team is growing, working remotely, or handling multiple systems. That’s where SAML Single Sign-On (SSO) comes into play.

Instead of users managing separate Atlassian passwords, SAML SSO lets them log in with their existing work credentials, through systems your company already uses, like Azure AD, Okta, or Google Workspace.

This means:
* One login for everything
* Fewer password resets
* Stronger security with centralized control

[SAML single sign on authentication](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso) makes it easier to manage user accounts of their teams as well. User access is managed directly from your identity provider (IdP). Thus, there’s less manual work, fewer mistakes, and better compliance, whether it be on Atlassian Cloud or Data Center.

### SCIM: Automating User Provisioning and Deprovisioning {#automating-user-provisioning-and-deprovisioning}

When someone joins your company, how many systems do they need to access project tickets? Jira? Confluence? Bitbucket? And when they leave, does the admin manually remove their access from each platform?

That’s where SCIM comes in.

[SCIM](https://www.miniorange.com/atlassian/atlassian-user-and-group-sync) (short for System for Cross-Domain Identity Management) automates the user and group management process, right from adding new employees to removing access when they leave. SCIM syncs everything from your identity provider (like Azure AD or Okta) to your tools in real-time, without the need of manually updating these changes. 

Here’s what that means for you:

* New employees get instant access to the right tools based on their role. 
* When someone changes departments, their access updates automatically.
* When offboarding, their accounts are removed instantly, reducing security risks. 
* No more spreadsheet tracking, manual mistakes, or compliance worries

### A Comprehensive Approach to Combining SAML And SCIM {#saml-and-scim}

SAML takes care of how users log in — securely, with just one set of credentials.
On the other hand, SCIM takes care of who gets access to what — automatically adding, updating, or removing users based on your identity provider in real-time.

Used together, they solve a lot of everyday issues for growing teams:

1. **Onboarding and Offboarding**

Let’s say a new hire, Sarah, joins your team. With SCIM in place, her user account is automatically created in Jira, Confluence, and Bitbucket, without any manual setup. When she signs in, SAML SSO handles secure, seamless authentication.

Now imagine another employee John leaves the company. With SCIM, his access is revoked across all tools instantly, without the need of manual updation. 

2. **Keeping User Attributes in Sync**

When Sarah gets promoted and moves to a new department, her group memberships and access levels need to reflect that change. SCIM updates everything the moment her profile is updated in the Identity Provider.

Thus, there is no mismatch in roles or out-of-date permissions. Just clean, accurate user data across your entire toolset.

3. **Real-Time Deactivation for Tighter Security**

Now consider an employee David is terminated. Without SCIM, the admin would need to update their access. With SCIM, that risk disappears. His access is revoked immediately, as soon as he’s removed from your IdP.

That kind of proactive control dramatically reduces security risks.

4. **Scalable Identity Management**

As teams scale, so do the issues with managing user access. SAML ensures a single, secure way to authenticate users. SCIM automates the rest: provisioning, deprovisioning, and updating roles at scale. Whether you're adding 5 users or 500, your identity management stays efficient, secure, and low-maintenance.

### Need for SCIM and SAML Integration {#scim-saml-integration}

There are several use cases for which SCIM needs to be combined with SAML-based single sign-on for a better, comprehensive approach: 

1. **Managing Temporary Project-Based Users**

When contractors or freelancers are brought on for short-term projects in Jira or Confluence:

* SCIM automatically provisions access only to the relevant Jira projects or Confluence spaces based on their role.
* [Jira SAML SSO](https://www.miniorange.com/atlassian/saml-sso-documentation) ensures they can log in securely without needing separate credentials.
* When the project ends, SCIM automatically deactivates their access, removing the risk of lingering permissions.

2. **Remote Work and BYOD Scenarios**

As teams access Atlassian tools from different locations and devices:

* Confluence SAML SSO enables secure access to Jira Cloud or Confluence without needing local credentials.
* SCIM ensures that changes to their role, team, or permissions are reflected in real time, without manual updation (unlike JIT).

3. **Automated Role-Based Access in Jira Projects**

Different teams require access to different Jira boards and Bitbucket repositories:

* SCIM ensures users are assigned the right roles and project permissions based on their job title or department.
* SAML enforces authentication and group-based access controls.

4. **Regulatory Compliance for Teams Using Jira/Confluence**

In regulated industries, companies using Atlassian tools must meet strict compliance standards:

* SCIM provides a clear audit trail for account creation, modification, and removal across tools.
* SAML logs every login attempt, helping security teams monitor and report on access with confidence.

5. **SaaS User Provisioning Management Across Atlassian Tools**

For organizations using Atlassian Cloud, managing hundreds of users can be a challenge:

* SCIM ensures that new hires are auto-provisioned across Jira, Confluence, and Bitbucket with accurate permissions.
* When someone leaves, SCIM immediately removes their access without requiring logins.
* SAML continues to provide a secure, unified login process across all apps.

### miniOrange's SAML and SCIM Bundle {#saml-and-scim-bundle}

miniOrange offers a comprehensive solution that integrates SAML Single Sign-On (SSO) and SCIM provisioning, addressing the challenges and use cases discussed earlier. This bundled offering streamlines identity management and enhances the overall user experience across various applications and services.

With [miniOrange's SAML and SCIM integration](https://marketplace.atlassian.com/apps/1215430/single-sign-on-saml-sso-for-jira-sso-saml-user-sync-scim?hosting=datacenter&tab=overview), organizations can benefit from the following features:

* **Centralized Identity Management:** Manage user identities and access rights from a single, centralized location, reducing administrative overhead and ensuring consistent policy enforcement.
* **Automated Provisioning and Deprovisioning:** Seamlessly onboard and offboard users across multiple applications and services through SCIM-based provisioning, eliminating manual intervention and reducing the risk of errors.
* **Real-time User Attribute Synchronization:** Keep user attributes, such as roles, permissions, and group memberships, synchronized across all connected applications, ensuring accurate and up-to-date access controls.
* **Scalability:** Easily scale identity management operations as your organization grows, without compromising efficiency or security.
* **Simplified Integration:** miniOrange's solution supports a wide range of popular applications and services, making it easy to integrate SAML SSO plugin and SCIM into your existing infrastructure.
* **Comprehensive Reporting and Auditing:** Gain insights into user activities, access patterns, and potential security threats through detailed reporting and auditing capabilities.


By combining SAML SSO and [SCIM provisioning](https://www.miniorange.com/atlassian/scim-and-rest-api-user-provisioning-documentation), miniOrange's solution addresses the key use cases discussed earlier, including effortless onboarding and offboarding, streamlined user attribute management, enhanced security through real-time access management, and scalable identity management for growing organizations.


### Wrapping Up {#wrapping-up}

Integrating SCIM with SAML SSO streamlines identity management processes, enhances security, and improves the overall user experience. By combining the strengths of SAML for authentication and SCIM for provisioning, organizations can achieve effortless onboarding and offboarding, seamless user attribute management, real-time access control, and scalable identity management solutions.

Choosing the right solution that combines SAML and SCIM capabilities is crucial for organizations seeking to optimize their identity management processes. Solutions like [miniOrange's SAML and SCIM bundle](https://marketplace.atlassian.com/apps/1215430/single-sign-on-saml-sso-for-jira-sso-saml-user-sync-scim?hosting=datacenter&tab=overview) offer a comprehensive and user-friendly approach, enabling organizations to leverage the full potential  of this powerful integration across various use cases and applications.











In the ever-evolving landscape of digital identity, achieving simplicity and efficiency is paramount. With the latest upgrade to the miniOrange SAML plugins, we're excited to announce the seamless integration of SCIM.

Seamless SSO and Identity Management: Unleashing the Power of SAML and SCIM Integration in miniOrange Plugin


As organizations grow and integrate multiple SaaS applications into their tech stack, managing user identities across systems becomes increasingly complex. Ensuring secure, compliant access to sensitive corporate data—while streamlining user provisioning and deprovisioning—is essential for operational efficiency. To address these challenges, organizations are increasingly turning to SCIM provisioning.

This blog will delve into SCIM provisioning, its key features, and how miniOrange supports both [SCIM and SAML protocols in its solutions](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso) to streamline identity management and secure user access.

### What is SCIM Provisioning? {#scim-provisioning}

[SCIM (System for Cross-domain Identity Management)](https://scim.cloud/) provisioning is an open standard that automates the exchange of user identity information between identity providers (IdPs) and service providers (SPs). It simplifies user lifecycle management—provisioning, updating, and deprovisioning users across multiple SaaS applications—ensuring secure, consistent, and efficient access control.

By leveraging SCIM, organizations can reduce manual administrative tasks, improve security, and maintain compliance by automatically syncing user attributes and access permissions across their tech ecosystem.

Any changes made in the IDP—such as creating, updating, or deleting user accounts or groups are automatically synchronized across all connected platforms in real time.

### Why is SCIM the Best Choice? {#why-is-scim}

SCIM provisioning offers several advantages, making it a preferred solution for identity management:

**\- Automation** : Eliminates manual tasks by streamlining user provisioning and deprovisioning, reducing errors, and saving time.

**\- Standardization** : Provides a consistent protocol for exchanging identity data, ensuring seamless integration across multiple platforms.

**\- Enhanced Security** : Maintains up-to-date access controls, minimizing the risk of unauthorized access and strengthening overall security.

**\- Scalability** : Efficiently manages thousands of users, making it ideal for enterprises with large workforces.

**\- Cost Efficiency** : Automation reduces administrative overhead, leading to significant cost savings.

### Key Features of SCIM Provisioning {#key-features}

SCIM provisioning offers robust features designed to simplify and enhance identity management:

**\- User Lifecycle Management** : Automates the creation, modification, and deletion of user accounts across systems.

**\- Real-Time Synchronization** : Instantly updates user data across all connected platforms, ensuring consistency.

**\- Seamless Compatibility** : Uses standardized protocols to enable smooth integration between identity providers and service providers supporting SCIM.

**\- Enhanced Security & Compliance** : Securely exchanges identity information while adhering to regulatory standards.

**\- Cross-Domain Integration** : Synchronizes user data effortlessly across multiple domains for streamlined identity management.

### Seamless Identity Management with SAML + SCIM App by miniOrange for Atlassian {#saml+scim}

miniOrange simplifies identity and access management for Atlassian environments with its Jira & Confluence [Single Sign-On (SSO) and SCIM provisioning](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso)app.

**Core Features of the miniOrange SAML & SCIM App**

**Seamless User Management with SCIM & JIT Provisioning:**

**\- SCIM User Sync & Provisioning** : Automates user identity synchronization from Identity Providers (IdPs) to Jira, handling user creation, updates, and deactivation in real time.

**\- Just-In-Time (JIT) Provisioning** : Automatically creates users and groups in Jira upon their first login, eliminating manual onboarding.

**Flexible Authentication & Access Control:**

**\- Multi-IDP Support** : Integrates seamlessly with leading Identity Providers like Okta, Azure AD, OneLogin, Keycloak, and more, providing flexible authentication options.

**\- Advanced Login Flow Control** : Enforce granular access policies, set up custom login redirections, and apply advanced authentication rules for a secure, tailored login experience.

**Enhanced Security & Compliance:**

**\- Single Logout (SLO)** : Ensures users are fully signed out from all connected applications when they log out, enhancing security.

**\- Header-Based Authentication** : Supports secure authentication for applications requiring custom header-based login methods.

**\- 2FA/MFA Integration** : Strengthens authentication by incorporating Two-Factor (2FA) or Multi-Factor Authentication (MFA) directly with Identity Providers.

miniOrange’s SAML & SCIM solution provides a **comprehensive, secure, and automated** approach to identity management within Atlassian environments, streamlining user access while enhancing security.

### Optimized for Atlassian Data Center Deployments {#data-center-deployment}

The miniOrange SAML & SCIM app is designed to meet the demands of Atlassian Data Center environments, ensuring:

**\- High Availability** : Built to support active-active clustering, preventing downtime and ensuring continuous authentication services.

**\- Scalability** : Handles large user bases efficiently, making it ideal for enterprises with thousands of users.

**\- Performance Optimization** : Maintains fast authentication and provisioning speeds, even during peak loads.

**Get Started with miniOrange**

Book a free demo of the miniOrange SAML & SCIM app today!

For more details or inquiries, contact us at **info@xecurify.com**, and our team will be happy to assist you.

### Frequently Asked Questions About SCIM {#faq}

**What does SCIM stand for?**

SCIM stands for **System for Cross-domain Identity Management**, a standardized protocol designed to automate user provisioning and identity synchronization.

**How is SCIM different from API-based provisioning?**

Both SCIM and API-based provisioning automate identity management, but SCIM follows a **standardized framework** specifically for identity synchronization, making integrations easier and more consistent. API-based provisioning, on the other hand, offers broader functionality but often requires **custom development** and ongoing maintenance.

**Is SCIM secure?**

Yes, SCIM is designed with security in mind. It **encrypts data during transmission** and follows industry best practices to ensure secure identity synchronization while maintaining compliance with regulatory standards.

**Can SCIM handle mismatched usernames between Identity Providers (IdPs) and service providers?**

Yes! miniOrange’s **Crowd SCIM Plugin** includes **regex-based username transformation**, allowing seamless mapping of mismatched usernames between IdPs and Atlassian applications.

**Does miniOrange offer advanced group management features beyond Atlassian's built-in SCIM?**

Yes, miniOrange provides **manual group mapping**, allowing administrators to link specific IdP groups to Jira groups. Unlike standard SCIM, which only supports **automated group sync**, miniOrange offers **granular control** over user access, ensuring the right users are assigned to the correct projects and resources.

**Can miniOrange sync custom user attributes to Jira beyond Atlassian’s standard SCIM fields?**

Absolutely! miniOrange supports **custom attribute mapping**, enabling you to sync additional user attributes—such as **department codes, employee IDs, or job roles**—from your IdP to Jira. This allows for **personalized user experiences** and improved automation, features that Atlassian’s native SCIM may not support. 

### Useful Links {#useful-links}

For more information on miniOrange’s offerings:

1\. [SCIM Provisioning Atlassian Plugin Marketplace](https://marketplace.atlassian.com/search?query=scim%20provisioning) 

2\. [SCIM miniOrange Webpage](https://www.miniorange.com/atlassian/atlassian-user-and-group-sync)

3\. [SAML SSO Landing Page](https://www.miniorange.com/atlassian/atlassian-saml-single-sign-on-sso)

4\. [SAML SCIM SSO Atlassian Marketplace Page](https://marketplace.atlassian.com/search?query=Saml%20SCIM)

5\. [Client Success Story - T- Mobile](https://www.miniorange.com/atlassian/scim-with-native-sso-for-t-mobile)







Discover the benefits of SCIM provisioning for your Atlassian environment. Automate user management, improve security, and simplify access with miniOrange.

Unlock SCIM Provisioning for Effortless and Secure User Management in Atlassian


## Jira Cloud SCIM/User Sync: Embrace Multiple IDPs and Customer Sync Freedom for Individual Applications {#jira-cloud-scim-user-sync}

&nbsp;

Is your business facing the challenge of synchronizing customer data along with integrating multiple identity providers (IDPs) for sync? Atlassian users look no further than our user management plugin [‘Jira Cloud SCIM/User Sync’](https://marketplace.atlassian.com/apps/1222000/mo-scim-provisioning-user-sync-group-sync-for-jira?hosting=cloud&tab=overview) which redefines the process, while seamlessly managing user identities and data synchronization.

&nbsp;

Let’s delve into the features of this groundbreaking plugin and see how it empowers enterprises to overcome the tedious task of synchronizing users/groups from multiple IDPs and streamlining customer data across multiple platforms.

&nbsp;&nbsp;

### Seamless Integration with Any IDP {#seamless-integration-with-any-idp}

&nbsp;

We begin with one of the key features, its ability to seamlessly integrate with any identity provider for synchronizing users. Whether your business relies on popular providers like Okta, Azure, or miniOrange, or you have a custom-built IDP, this plugin eliminates the hassle of performing different CRUD and User provisioning operations based on systems. It provides a unified interface for user provisioning, enabling developers to focus on building innovative applications rather than worrying about IDP compatibility.

&nbsp;

For instance, if an organization has customer identities managed in multiple Azure directories or in different entities like Okta and Azure AD, it would be a headache to manage these Identities at the same time on the Enterprise level. However, you can leverage our plugin to consolidate your user provisioning process and utilize both Azure and Okta simultaneously without having to choose one over the other and provide a seamless user experience across multiple applications..

&nbsp;&nbsp;


### Independent Application Development {#independent-application-development}

In the past, managing multiple users and groups manually has been a complex and time-consuming task. However, our plugin offers a solution that allows businesses to develop applications that are not limited to a single IDP or a specific method of customer and user synchronization. It provides flexibility and independence in integrating with different systems..

&nbsp;

For example, multiple SCIM connections (System for Cross-domain Identity Management to System for Cross-domain Identity Management): In this scenario, our plugin enables an application to synchronize user data between two or more IDPs that support the SCIM protocol. The application can retrieve user information from one SCIM-based IDP and synchronize it with another SCIM-based IDP.

&nbsp;

Likewise, you can create multiple connections for the SCIM or the REST API Connectors or a combination of both, while maintaining a unified user experience across different platforms.

### Flexible Customer Sync Options {#flexible-customer-sync-options}

When businesses use multiple applications, it's important for them to keep their customer data synchronized, meaning that the data is consistent and up-to-date across all the applications they use. Our plugin for JIRA makes it easy to manage this synchronization process. It gives you a lot of flexibility and customization options. You can decide how you want the synchronization to happen.


&nbsp;

For example, you can choose to sync the data in real-time, meaning it happens instantly as changes are made. Alternatively, you can do a group sync, where the data is synchronized in groups at specific intervals, control access to portals based on IDP groups and organizations. You can even choose to manually sync the data when you want. This flexibility ensures that your customer data stays current in all your applications, without affecting performance or the experience of your users.

### Enhanced Security and Privacy {#enhanced-security-and-privacy}

When we deal with user identities and sensitive customer data, our top priority is to ensure security and privacy. Our plugin is designed to ensure that the right people have appropriate access to your system. By implementing granular access levels, we provide a robust user management solution that allows you to assign and control permissions with precision.

&nbsp;

Administrators are empowered with comprehensive control, while users can perform advanced tasks within predefined boundaries. You can confidently regulate access and safeguard sensitive resources, ensuring that only authorized individuals can interact with them.

&nbsp;

By implementing these measures, we aim to maintain the highest level of security for user data throughout the entire process.

### Wrapping It Up {#wrapping-it-up}

With seamless IDP integration, Jira Cloud SCIM/User Sync offers a powerful solution for organizations seeking to enhance their user management capabilities. By integrating with your Identity Provider (IDP), it streamlines the user provisioning and management processes, ensuring a seamless experience for both administrators and end-users.

&nbsp;
By leveraging the SCIM functionality to Jira cloud, you can focus on delivering exceptional user experiences. With streamlined user management processes, you can devote more time and resources to building engaging applications and features that delight users. Our solution puts you in control by seamlessly integrating with multiple IDPs and facilitating customer sync, allowing you to maintain governance over your applications and data.

&nbsp;

To learn more about [Jira Cloud SCIM/User Sync](https://marketplace.atlassian.com/apps/1222000/mo-scim-provisioning-user-sync-group-sync-for-jira?hosting=cloud&tab=overview) or if you have specific inquiries, you can contact us at **support-atlassian@miniorange.atlassian.net** or raise a support ticket [here](https://miniorange.atlassian.net/servicedesk/customer/portal/2). Stay tuned to this space for more new and innovative solutions as we continue to enhance our offerings and deliver cutting-edge solutions to meet your evolving needs.


Contact Us – Drop us a mail at **info@xecurify.com** or [raise a ticket here](https://miniorange.atlassian.net/servicedesk/customer/portal/2) to talk to us.





Unlock exceptional user experiences while maintaining control over applications and data with Jira Cloud SCIM/User Sync. Seamlessly integrate your Identity Provider, develop custom applications, sync customer data, and enjoy enhanced security measures.

Jira Cloud SCIM/User Sync: Embrace Multiple IDPs and Customer Sync Freedom for Individual Applications


## How miniOrange User Sync/SCIM Automates User Provisioning for Atlassian DC applications {#how-miniorange-user-sync-automates-user-provisioning-for-atlassian-dc-applications}

Managing users in Atlassian manually, especially in situations with large numbers of users, is time-consuming and prone to human error. With employees joining various departments and projects on a regular basis, a lot of time is spent on managing users with the access they need which can lead to users being provisioned incorrectly.

[miniOrange User Provisioning](https://marketplace.atlassian.com/search?query=miniOrange%20User%20Sync) for Atlassian applications comes packed with a variety of powerful features. With the miniOrange User Provisioning app, employee/user accounts can be created, updated, deleted, and given proper access across multiple applications at the same time. The procedure of adding, updating, and deleting users, as well as managing their access, is automated. 

&nbsp;

![user-sync-scim](/blog/assets/2023/user-sync-scim-automate.webp)


When it comes to Atlassian products such as Jira, Confluence, and Bitbucket you can use Just-in-time provisioning provided with the Single Sign-On functionality of Atlassian Data Center. The native SSO functionality of Atlassian allows you to update the users and their groups at the time of SSO login. **However, for most enterprises, this does not fulfill the overall requirement.** 

Atlassian SSO updates users and groups only at the time of SSO (Just in Time Provisioning). 

&nbsp;
 

Most Atlassian customers implementing SAML use the attributes sent in the SAML response to provision users just-in-time. 

 &nbsp;

Using Just In Time (JIT) Provisioning, you receive all group and user information from your Identity Provider. JIT provisioning will remove any existing Jira or Confluence groups that are not in the SSO response. Managing a few groups within Jira or Confluence will never work in this scenario. **If you are manually managing some groups, that will not work with Atlassian SSO. This is one of the shortcomings of Atlassian’s provisioning model and may not be an ideal solution for Enterprises.**

&nbsp;

In this article, we will go over the top provisioning features that you won’t find in Atlassian’s inbuilt User Provisioning in Data Center – but you will find in miniOrange’s User Provisioning App. 

&nbsp;

Let’s see what the miniOrange User Provisioning app offers along with Just-in-time provisioning:
 
- **Real-time provisioning**– your user and group information will get automatically updated every time the user’s data is updated in the Identity Provider. 

- **Sync the User from a particular group or an application** – You can sync users from a particular group or application if you do not want all your users synchronized. Members from only that group will be synchronized. 

- **User Deactivation/Delete from Jira/Confluence** - According to some estimates, approximately 30% of all Atlassian user licenses are unused. This happens because users that leave the organization or change roles don’t have their accounts deactivated in a timely manner. Atlassian users whose accounts haven’t been deactivated can have negative consequences, like exceeding license limits leading to an increase in licensing costs and retaining access from former employees – posing major security concerns.

&nbsp;&nbsp;

**Just-in-Time provisioning cannot be used to deactivate the user since the SSO process involves active user accounts.** You can manually remove the user from the Jira group but it will still consume the licenses. 

With the help of our User Provisioning Add-on, you can **automatically deactivate and delete multiple users** from specific groups. Users can be automatically deleted based on their status in the directory. 

- **Synchronization of User Directories:** the miniOrange User Sync plugin can synchronize entire directories with the help of Real-time provisioning. When user directories are synchronized, new users will automatically be added in the respective Atlassian applications. With User Directory Synchronization you can also sync IDP-specific directories. You can also schedule synchronization which provides proactive provisioning and de-provisioning of users and groups at regular intervals (sync).

- **User name and Group transformation –** Native SSO provisioning requires you to provision the user with the same username as IDP. However, with username transformations, you can associate the provisioning of users with different values. Filtering groups will help you to manage access and permissions within Jira or Confluence easily.

Apart from this, the [miniOrange User Provisioning](https://marketplace.atlassian.com/search?query=miniOrange%20User%20Sync) App offers a wide range of features focusing on provisioning users from your IDP directory into Atlassian Applications. Below is the detailed comparison of the [miniOrange User Provisioning app](https://marketplace.atlassian.com/search?query=miniOrange%20User%20Sync) with native Atlassian. 

### miniOrange User provisioning Features {#miniorange-user-provisioning-features}

1. Supports SCIM 2.0 and SCIM 1.1 protocol	
2. On- the fly group mapping
3. Manual Group Mapping	
4. Default Group Mapping
5. Sync History
6. Provision to map groups from IdP to local groups

**Ready for the action? Install User Sync today!**

 &nbsp;&nbsp;

It’s really easy to manage users via our developed user provisioning add-ons which can be connected with your IDPs ([Azure AD](https://www.miniorange.com/atlassian/jira-scim-user-and-group-provisioning-for-azure-ad), [Okta](https://www.miniorange.com/atlassian/jira-scim-user-and-group-provisioning-for-okta), [OneLogin](https://www.miniorange.com/atlassian/jira-scim-user-and-group-provisioning-for-onelogin), [G suite](https://www.miniorange.com/atlassian/user-and-group-sync-user-provisioning-g-suite/), [Keycloak](https://www.miniorange.com/atlassian/user-and-group-sync-for-keycloak)) or any other SCIM compliance applications so when you setup your Jira Azure AD SCIM or Jira Okta SCIM, user sync plugin will make it a cakewalk for you. Follow the guide to quickly set it up for the Data Center version.

 &nbsp;&nbsp;
 
The add-on also works with [Single Sign On](https://marketplace.atlassian.com/search?query=miniOrange%20Single%20Sign%20On%20) where SSO is used for authentication and User sync application is used for automatic provisioning.


&nbsp;&nbsp;


Contact Us – Drop us a mail at **info@xecurify.com** or [raise a ticket here](https://miniorange.atlassian.net/servicedesk/customer/portal/2) to talk to us.





Managing users in Atlassian manually, especially in situations with large numbers of users, is time-consuming and prone to human error. With employees joining various departments and projects on a regular basis, a lot of time is spent on managing users with the access they need which can lead to users being provisioned incorrectly.

How miniOrange User Sync/SCIM Automates User Provisioning for Atlassian DC applications


## User Provisioning App : Keeps you in sync with multiple Atlassian applications! {#keeps-you-in-sync-with-multiple-atlassian-applications}

[Advanced Option for Atlassian SSO Plugin](https://marketplace.atlassian.com/apps/1229209/advance-options-for-atlassian-sso?hosting=datacenter&tab=overview)

Picture this: You have 1000s of users. Each user accesses multiple atlassian applications like Jira and Confluence and some of them keep facing issues with user access, activation and deletion which by the time you resolve, you have another pile waiting for you. Sounds familiar? 

&nbsp;&nbsp;

How are you going to manage user provisioning and de-provisioning and access of every user for each application? Manually managing large numbers of users is equivalent to putting out fires all day long. We’ve got you covered with our User Provisioning /SCIM add-on, which can help you to handle your users/employees instantly and effortlessly across atlassian applications for Jira SCIM and Confluence SCIM. Wondering how is it possible? We will help you to understand exactly how it can be done.

### What is User Provisioning and Deprovisioning? {#user-provisioning-and-deprovisioning}

User Provisioning is the process of creating, updating and/or deleting a user’s account and access through multiple applications at once. In our particular case this user sync or SCIM can be applied to Atlassian applications for Jira User Sync and Confluence User Sync. Provisioning provides information about users / employees such as their name, attributes, groups and other relevant data allowing them to grant or revoke access as required. Some of the real time examples like hiring, promotions, transfers can set off provisioning. Provisioning ensures user’s access rights are up to date, without manual efforts for each user across all applications.

&nbsp;&nbsp;


### Why is User Provisioning / Deprovisioning important? {#Why-is-user-provisioning-deprovisioning-important}

- Automatically create, update, deactivate or activate user accounts across applications.
- Saves time, manages users directory at one place and keeps everything else sync with directory.
- Automatically assign role-based permissions within apps
- Ensure the prevention of unauthorized access by automatically revoking access to all apps at once – de-provisioning.

### Ready for the action? Install User Sync today! {#ready-for-the-action-imstall-user-sunc-today}

- It’s really easy to manage users via our developed user provisioning add-ons which can be connected with your IDPs (Azure AD, Okta, OneLogin,G suite, Keycloak) or any other SCIM compliance applications so when you setup your Jira azure AD SCIM or Jira Okta SCIM, user sync plugin will make it a cakewalk for you. Follow the guide to quickly set it up for the Server or Data Center version.
- The add-on also works with Single Sign On where SSO is used for authentication and User sync application is used for automatic provisioning.

 
Contact Us – Drop us a mail at **info@xecurify.com** or [raise a ticket here](https://miniorange.atlassian.net/servicedesk/customer/portal/2) to talk to us.





User Provisioning is the process of creating, updating and/or deleting a user’s account and access through multiple applications at once. In our particular case this user sync or SCIM can be applied to Atlassian applications for Jira User Sync and Confluence User Sync.

User Provisioning App : Keeps you in sync with multiple Atlassian applications!


## Crowd User Management at your fingertips 🙌

Hello Crowd Admins!

An acronym for System for Cross-domain Identity Management, SCIM is an open standard that helps in automating the user identity lifecycle management process.

That’s the industry definition, sounds complicated! Let’s see if we can simplify it a bit with the help of this article. It’s all about ‘identity and access management (IAM),’ the concept has been around for quite some time. Think about if you are able to create a user account in one system and matching accounts automatically get created in other systems the user needs access to.

Sounds amazing but it’s not so simple as each system may have its own unique connection methods such as LDAP, SQL, ADSI, custom APIs, etc. That’s where SCIM comes into the picture, it is designed to make managing user identities in cloud-based services and applications easier, but before we go further let’s dive into…

### Why SCIM? {#why-scim}

Instead of the ‘what’ let’s begin with the ‘why.’ We use different cloud-based SaaS applications such as Salesforce, Zendesk, GitHub, Trello, etc. in our daily work routine depending on our role. These applications were assigned to us when we initially joined. This is done by the IT Admin of the company, now think for a minute if a company has less than 10 employees, manually adding them to the application might work but what if the size of the company runs into hundreds or thousands, the task becomes challenging. And, what about when an employee leaves or is terminated from the company they are removed from the company’s employee directory and all access revoked?

The crowd is the tool given by Atlassian which manages users and groups for all Atlassian apps. Crowd is a centralized directory and the access and authorization to Jira, confluence applications are very much dependent on Crowd.

We are pleased to present to you the app that aims to solve your most complex problem. Syncing & Managing users in a crowd is now a problem of the past! Introducing the miniOrange [Crowd SCIM Plugin](https://marketplace.atlassian.com/apps/1229918/mo-scim-provisioning-user-group-sync-for-crowd?hosting=datacenter&tab=overview) 🎉

The Crowd SCIM plugin connects Crowd with your Identity Provider. You can connect different Identity Providers such as Okta, Azure AD, Onelogin, Keycloak, G Suite and any SCIM Supported IDPs for provisioning. Unleash the true potential of Crowd giving you access to features like:-

**Provision & De-Provision users 🔁**

Easily provision and de-provision users in Crowd in sync with your Identity Provider.

**Update/Activate/Deactivate users ✅**

Automatically update the details of users, and activate and deactivate user accounts (If deleted or deactivated in IDP) to save extra license costs and improve the security of your organization.

**Real-Time Provision Users 🚀**

As soon as a user is created on your Identity Provider, it will automatically be created in Crowd, in REAL TIME!!!!

**IDP App-specific provisioning 🖥️**

You can choose provisioning features based on your configured IDPs. Isn’t that great?

**Transform username based on regex for matching user 🧑‍**

Do your users have different usernames in your IDP and different usernames in Crowd? We’ve got you covered. This feature will allow you to transform the username received from the IDP and create or update the desired username in Crowd.

![Crowd User Management Sync](https://miniorange.com/atlassian/wp-content/uploads/sites/14/2023/01/Crowd-SCIM.webp)

I hope you enjoy this plugin as much as we did while creating it. While this is what we’re offering now, here’s our roadmap for the next release:

-   Upcoming Features 🛣️

-   Scheduled Provisioning

-   Filter users by groups for assigning

-   Manual user sync button

-   Sync/update users upon successful authentication

Feel free to reach out to us at [atlassiansupport@xecurify.com](mailto:atlassiansupport@xecurify.com) for a free demo, setup, or any custom use case. We’re happy to help 😄

Try the miniOrange Crowd SCIM plugin today!


Use Crowd SCIM to sync your users, groups and directories with SCIM for Server/DC. Support for Azure AD, Okta, Onelogin, Oracle IDCS, ... IDPs

Crowd User Management at your fingertips


## How miniOrange SCIM Simplifies Centralized IDP User Management in Atlassian Apps

If your business relies on various Atlassian applications and services to conduct your day-to-day operations, you would certainly relate that managing user accounts and their access could be challenging and often time consuming. This is where **miniOrange’s User Sync/SCIM** App comes into play.

SCIM an acronym for ‘System for Cross-domain Identity Management’ is a protocol that allows for automated provisioning and de-provisioning of user accounts between different systems. Our app allows seamless login into the **Jira, Confluence. Bitbucket, Crowd** and other Atlassian applications with Identity Provider (IdPs) like [Azure Active Directory, Keycloak, Okta, OneLogin, Oracle and more.](https://developers.miniorange.com/docs/atlassian/scim/overview)

To get a better understanding of its use cases, let’s take Okta as the identity provider and an application, say Jira:

### New Employee Onboarding (User Creation) {#user-creation}

When we talk about user creation, we refer to the process of adding a new user account to various systems that they may require. This usually happens when a new employee joins an organization and would need access to, say for instance, a team collaboration tool (Confluence) or a project management tool (Jira), if a developer then probably a tool to effectively store, manage and monitor codes (Bitbucket).

Let’s say when a new employee joins your company, the IT administrator with user information like username, email, and other relevant details would create a new user account in Okta (IDP), and then miniOrange User Sync/ SCIM ensures that accounts created in Okta is automatically replicated in Jira, profiles and attributes are in sync between both the systems.

### Change in User Information (User Updation) {#user-updation}

User information like email address, phone number, or role may change over time, and it’s essential to keep this information updated and ensure that it is consistent in all applications. Any such changes can also be automatically updated using miniOrange User Sync/ SCIM. Admins can easily update user information in Okta and those changes would reflect in Jira.

For example, if a user changes their phone number, you can update that information in Okta and the changes would be synced in Jira so that it’s consistent with both systems.

### Revoking User Access (Deactivation) {#user-deactivation}

When an employee leaves the company their access to company resources should be removed to maintain security and compliance. It also could be the case that a user’s access to certain systems needs to be revoked based on role change. This process of deactivation is automated just like the above with the app and once a user is deactivated in Okta, SCIM App will automatically deactivate the corresponding user in Jira.

For example: if an employee leaves the company, the HR department would disable their account in Okta and the miniOrange User Sync/SCIM would then automatically disable or remove the user’s account in Jira so that their access to the application is revoked.

### Assigning Groups to Users (Group Mapping) {#assigning-groups-to-users}

![SCIM flow diagram](/blog/assets/2023/miniorange-scim-for-atlassian-apps.webp)

Another essential use case is that it enables admins to manage user access to different resources and applications based on their group, in other words, it refers to the process of associating users with specific groups. With miniOrange User Sync/SCIM, you can map users to groups in Okta and Jira. This ensures that users have the necessary access to resources based on their roles and responsibilities. Group mapping can be done manually or [on the fly](https://developers.miniorange.com/docs/atlassian/scim/user-groups).

**Manual Group Mapping** involves manually assigning users to groups in Okta and Jira. It is useful when your IdP group names and local application group names are different here you would have to map each IdP group to the application group manually.

It allows you to manually map Jira groups with the groups from Okta or filter groups, and make changes to existing users. Manual Group Mapping is useful when you want to manage groups from Okta but the group name differs in Okta and Jira.

For example, if the name of the group in Okta is Dev users but the name of a similar group in Jira is Software_dev. In such scenarios, you would have to manually map each Okta group to the Jira group.

**On-the-fly** group mapping refers to the process of dynamically mapping users to groups. For instance, when group names in Okta and Jira are an exact match, the app would detect the groups and add users to those groups automatically and if a group doesn’t exist in Jira then it would be created.

Let’s say for better clarity, you use Okta for identity and access management and Jira for project management. There are several teams working on different projects, each team has its own group with a unique name, here let us consider “Marketing” group in Okta and a “Marketing” group in Jira. When a new user joins the company, they are added to Okta, and their profile contains information about which team they belong to.

As there is an integration between Okta and Jira using the miniOrange app that supports on-the-fly group mapping. The app detects the team information from Okta and checks if a group with the same name exists in Jira. If a group with the same name exists, the user is automatically added to that group, in this case, “marketing” if not, then a new group ‘marketing’ is created in Jira and the users are added.

The above are just a few of the most common use cases but it’s not just limited to that. **Identity Migration**-moving from one IdP to another, **SSO (Single Sign-On)** can be integrated with our SCIM app, **attribute transfer** to a relying party’s website and more. That brings us to…

### How Do IT Administrators Working with Atlassian Applications Benefit? {#benefits-for-it-admins}

Our SCIM integration offers various benefits to Atlassian application users, be it **Confluence, Jira, Bitbucket, or Crowd.** It is a popular solution among IT admins for user provisioning and de-provisioning. One of the main advantages of SCIM is that it **saves licensing costs** as it automates the user provisioning and de-provisioning process. Organizations with a large number of users can reduce the number of licenses needed for applications thus saving a significant amount of money.

The addon ensures that resources are allocated more efficiently as new users are automatically provisioned with the appropriate access rights. miniOrange User Sync/SCIM allows for **granular control** so that users only have access to the resources they need thus **mitigating the risk of unauthorized access.** All leads to **enhanced security** by ensuring that user access is granted or revoked in a timely manner.

Companies can expect an **increase in productivity** as our app eliminates the need for manual user provisioning and de-provisioning so that your IT staff can focus on more critical tasks. The automated process **reduces the risk of manual errors** as well. With these benefits, your business can look to **improve the overall user experience** eventually leading to higher user satisfaction.

### Summary {#summary}

If you are here, that means you took the time to go through the use cases and the overview of our app. No more time-consuming manual onboarding and offboarding users, employees get easy and quick access to the apps they need to work. You get automated access management that not just saves you time but also money.

You could also go through our other apps that compliment ‘lifecycle management’ such as SSO that would work in tandem to keep you secure. So, set up your employees fast with what they need, and unburden your IT team to focus on the bigger picture. Looking for something specific? Please contact us at **support-atlassian@miniorange.atlassian.net** or raise a support ticket [here](https://miniorange.atlassian.net/servicedesk/customer/portal/2), and keep watching this space for more new and innovative solutions.


SCIM an acronym for ‘System for Cross-domain Identity Management’ is a protocol that allows for automated provisioning and de-provisioning of user accounts between different systems. Our app allows seamless login into the Jira, Confluence, Bitbucket, Crowd and other Atlassian.