Organizations rely on identity providers (IdPs) such as Microsoft Entra ID and Okta to manage access across applications. Without automated provisioning, user lifecycle management can become fragmented, time-consuming, and prone to inconsistencies.
Today, HashiCorp Cloud Platform (HCP) introduces SCIM provisioning to automate user and group lifecycle management directly from your IdP. By making your IdP the source of truth for identities, HCP helps ensure access remains consistent, scalable, and secure as organizations grow.
»Eliminate manual user management
A system for cross-domain identity management (SCIM) provides a standardized way to provision and manage identities across platforms. On HCP, SCIM automatically synchronizes user and group lifecycle events from your IdP, including user creation, deactivation, group provisioning, and membership updates.
By removing the need to manage identities separately in HCP, organizations can reduce administrative effort while ensuring access remains aligned with existing identity policies.
»Align access with identity provider groups
Many organizations already use IdP groups to control access across internal applications and infrastructure. SCIM extends that model to HCP by synchronizing groups and group memberships automatically.
As team membership changes, access updates propagate through established identity workflows rather than requiring manual changes in multiple systems. This helps reduce operational complexity and minimizes the risk of inconsistent permissions.
»Improve security and compliance
Identity lifecycle management plays an important role in maintaining security and compliance. Manual processes can delay onboarding, slow access revocation, and contribute to privilege drift over time.
With SCIM provisioning, user and group changes are automatically synchronized from your IdP to HCP. Organizations can onboard users faster, accelerate access removal when roles change, and maintain a more accurate representation of who should have access to HCP resources.
»Integrate with enterprise identity providers
SCIM provisioning on HCP integrates with common enterprise IdPs, making it easy to adopt within your existing identity infrastructure.
Supported providers include:
Microsoft Entra ID
Okta
Ping Identity
IBM Verify
To get started:
Enable SAML SSO in HCP
Enable SCIM provisioning and generate credentials
Configure provisioning in your IdP
Assign users and groups
Once configured, HCP automatically manages identities using SCIM.
»Get started
SCIM provisioning is available for all organizations using SAML SSO on HCP. Enable it in your organization settings to eliminate manual user management and keep access aligned with your IdP.
Learn more in our SCIM provisioning documentation.
