> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/integrations/scim.md).

# SCIM integration

![](/files/mlZo7QhbBaWAQlpvEVi9)note

This feature requires [SAML integration](/sast-and-sca/prezero/integrations/saml.md) to be already configured.

Qwiet AI by Harness supports SCIM v2 (System for Cross-domain Identity Management). This allows for seamless integration with Identity Providers (IdPs) and simpler user provisioning and management.

## Steps to enable SCIM for your organization <a href="#steps-to-enable-scim-for-your-organization" id="steps-to-enable-scim-for-your-organization"></a>

1. A reserved email domain is required to enable SCIM. To reserve your domain, send an email request to `support@qwiet.ai` stating you want to reserve your company domain for the purpose of enabling SCIM
2. Once your email domain is reserved, you may configure your SCIM provider (i.e. Entra ID, Okta) to point to the Qwiet SCIM endpoint: `https://app.shiftleft.io/api/v4/orgs/{orgID}/scim` - be sure to insert your correct Organization ID
3. If you prefer to have your Identity Provider groups brought over to Qwiet as User Groups that you can assign to Teams, make sure to enable the setting in your Organization Settings for "[Prefer Groups](https://app.shiftleft.io/organization/settings)". Otherwise, leave it disabled to sync your SCIM groups as Qwiet Teams

## Endpoint <a href="#endpoint" id="endpoint"></a>

The base URL for SCIM endpoints is: `https://app.shiftleft.io/api/v4/orgs/{orgID}/scim`

## Authentication <a href="#authentication" id="authentication"></a>

You can authenticate using a [SCIM Integration Token](/sast-and-sca/prezero/integrations/tokens.md) or a Super Admin's Access Token found in the [Organization Overview page](https://app.shiftleft.io/organization/overview), on the Qwiet AI by Harness web UI.

## User data handling <a href="#user-data-handling" id="user-data-handling"></a>

The following data points are mapped into a Qwiet AI by Harness user:

* `userName`: when provided by the SCIM v2 provider, ensure that the `userName` field contains the primary work email
* `email`: `email` should be included, preferably marked as primary
* `displayName`: while not mandatory, it is recommended to include the `displayName` field for better user identification

## Supported schemas <a href="#supported-schemas" id="supported-schemas"></a>

The current SCIM v2 implementation supports the following schemas:

* User (`https://app.shiftleft.io/api/v4/orgs/{orgID}/scim/Users`)
* Group (`https://app.shiftleft.io/api/v4/orgs/{orgID}/scim/Groups`)

Schema discovery is available to facilitate the integration and the understanding of supported attributes and endpoints.

`https://app.shiftleft.io/api/v4/orgs/{orgID}/scim/Schemas`

For further assistance or inquiries, please contact your Customer Success representative.