SCIM Provisioning: Specify user role via SCIM

SmartSuite now supports setting member roles directly through SCIM provisioning, giving organizations more precise control over user access during automated user creation and updates. This enhancement ensures that users are assigned the correct role from day one, fully aligned with your identity provider configuration.
‍

Key highlights

• Role Assignment via SCIM: You can now define a member’s SmartSuite role as part of SCIM user provisioning.
• Supported Roles: SCIM provisioning supports the following role values: admin, solution_manager, general, and guest
• Consistent Access Control: Roles can be applied both when users are created and when user attributes are updated, ensuring ongoing alignment with your identity system.
• Provider-Agnostic Design: While configuration examples may reference specific providers (such as Okta), this capability applies to any SCIM-compliant identity provider.
  ‍

How it works

• When provisioning users via SCIM, identity providers can include a roles attribute as part of the SCIM user payload.
• SmartSuite reads the roles value and assigns the corresponding member role within the workspace.
• If no role is provided, SmartSuite applies the default role (general).
• Role values are validated to ensure only supported SmartSuite roles are accepted.
• Updates to the roles attribute in your identity provider are reflected in SmartSuite on subsequent SCIM syncs.
  ‍

This enhancement improves alignment between identity management systems and SmartSuite workspaces, reducing manual role management and strengthening enterprise-grade access governance.