From 63fac39fff6eea99c3d82c54cc0435c37fb36bbc Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Sat, 23 Nov 2024 03:11:06 +0800 Subject: [PATCH] doc: added tip for SCIM --- docs/documentation/platform/scim/overview.mdx | 29 ++++++++++++------- 1 file changed, 19 insertions(+), 10 deletions(-) diff --git a/docs/documentation/platform/scim/overview.mdx b/docs/documentation/platform/scim/overview.mdx index 232df95a1..c29241e49 100644 --- a/docs/documentation/platform/scim/overview.mdx +++ b/docs/documentation/platform/scim/overview.mdx @@ -3,11 +3,15 @@ title: "SCIM Overview" description: "Learn how to provision users for Infisical via SCIM." --- + + SCIM provisioning can only be enabled when either SAML or OIDC is setup for + the organization. + - SCIM provisioning is a paid feature. - - If you're using Infisical Cloud, then it is available under the **Enterprise Tier**. If you're self-hosting Infisical, - then you should contact sales@infisical.com to purchase an enterprise license to use it. + SCIM provisioning is a paid feature. If you're using Infisical Cloud, then it + is available under the **Enterprise Tier**. If you're self-hosting Infisical, + then you should contact sales@infisical.com to purchase an enterprise license + to use it. You can configure your organization in Infisical to have users and user groups be provisioned/deprovisioned using [SCIM](https://scim.cloud/#Implementations2) via providers like Okta, Azure, JumpCloud, etc. @@ -24,9 +28,14 @@ SCIM providers: **FAQ** - - Infisical's SCIM implementation accounts for retaining the end-to-end encrypted architecture of Infisical because we decouple the **authentication** and **decryption** steps in the platform. - - For this reason, SCIM-provisioned users are initialized but must finish setting up their account when logging in the first time by creating a master encryption/decryption key. With this implementation, IdPs and SCIM providers cannot and will not have access to the decryption key needed to decrypt your secrets. - - \ No newline at end of file + + Infisical's SCIM implementation accounts for retaining the end-to-end + encrypted architecture of Infisical because we decouple the + **authentication** and **decryption** steps in the platform. For this + reason, SCIM-provisioned users are initialized but must finish setting up + their account when logging in the first time by creating a master + encryption/decryption key. With this implementation, IdPs and SCIM providers + cannot and will not have access to the decryption key needed to decrypt your + secrets. + +