Directory sync (SCIM)
Automatic user provisioning and deprovisioning. Keep your directory in sync with HR systems.
Automatic provisioning
Create user accounts automatically when employees join. Zero manual work, zero delays.
Instant deprovisioning
Revoke access immediately when employees leave. No orphaned accounts, no security gaps.
Group sync
Keep group memberships synchronized across all systems. Maintain consistent access control.
SCIM 2.0 compliant
Industry standard protocol
Real-time sync
Changes reflected instantly
0
Automatic cleanup on departure
noo id implements SCIM 2.0 to fully automate user provisioning and deprovisioning from your HR system or identity provider. Connect your directory once, and every employee lifecycle event is handled automatically in real time.
How directory sync works
noo id implements SCIM 2.0 to automate the entire user lifecycle, from onboarding to offboarding, with your HR system as the source of truth.
HR system update
An employee is added, modified, or removed in your HR system or identity provider.
SCIM request sent
Your HR system sends a SCIM 2.0 API request to noo id with the user data and operation type.
Account provisioned
noo id creates or updates the user account, mapping attributes from the source system to the user profile.
Groups assigned
The user is automatically added to the correct groups based on department, role, and custom rules.
Welcome email
A welcome email is sent with login instructions, or the user is prompted to set up passwordless authentication.
Supported directories
Okta
Native integration with Okta for automatic provisioning, deprovisioning, and group sync.
Azure AD
Azure AD Connect support for seamless user and group synchronization with Microsoft environments.
Google Workspace
Google Directory sync for organizations using Gmail and Google Workspace as their identity provider.
BambooHR
Direct integration with BambooHR to provision accounts from employee records automatically.
Workday
Workday HCM integration for enterprise organizations managing large-scale workforce data.
JumpCloud
JumpCloud directory integration for cloud-forward organizations using open directory platforms.
Attribute mapping
Flexibly map SCIM attributes from your HR system to noo id user profile fields with standard and custom mappings.
{
"userName": "username",
"name.givenName": "first_name",
"name.familyName": "last_name",
"emails[type eq work].value": "email",
"urn:...enterprise:2.0:User:department": "department"
}
Deprovisioning workflows
Immediate termination
Account is disabled instantly, all sessions terminated, and tokens revoked within seconds of the HR system update. Ideal for involuntary terminations or security incidents.
Graceful departure
Account remains active until the scheduled departure date, then is automatically disabled. Manager and IT are notified, and data is retained per your configured retention policy.
Temporary suspension
Account is disabled but fully preserved for leaves of absence. When the employee returns, their account is re-enabled with all previous group memberships and settings restored.
Frequently asked questions
What is SCIM and why should I use it? +
SCIM (System for Cross-domain Identity Management) is an open standard for automating user provisioning. It eliminates manual account creation, ensures immediate deprovisioning when employees leave, and keeps your directory synchronized with your HR system as the source of truth.
Which HR systems and directories does noo id support? +
noo id integrates with all major HR systems and directories including Okta, Azure AD, Google Workspace, OneLogin, JumpCloud, BambooHR, Workday, and any other system that supports SCIM 2.0. Custom integrations are available for enterprise customers.
What happens if an employee is suspended or changes departments? +
noo id supports partial updates through SCIM PATCH operations. If an employee is suspended in your HR system, their account is automatically disabled. If they change departments, their group memberships are updated to reflect the new organizational structure. All changes sync in real-time.