SCIM user provisioning 

SCIM user provisioning allows you to automatically manage and sync members and groups in Clockify through your identity provider (IdP). This way, user access is up-to-date across the Clockify workspace.

Its benefits include:

• Efficiency for large teams: Automatically add hundreds of users at once without manual invites.
• Enhanced security: Ensure users lose access to Clockify immediately upon being deprovisioned from your company’s system.
• Centralized management: Sync both users and groups to keep your workspace structure consistent.

Enable SCIM #

To begin the integration, an Owner must generate the necessary credentials in Clockify to link with the IdP.

1. Navigate to your Workspace Settings.
2. Locate the SCIM section.
3. Enable the SCIM option to generate your unique:
   • Base URL
   • Bearer Token
4. Copy these values and paste them into your Identity Provider (e.g., Okta, Microsoft Entra ID, Google Workspace, or JumpCloud) when creating the SCIM application there.

Once SCIM is connected, Clockify will automatically handle the following actions based on changes in your IdP:

For users: #

• Users are created in Clockify as soon as they are added to the IdP.
• Changes to a user’s name or email in the IdP will automatically update in Clockify.
• When a user is activated or deactivated in the IdP, their status in Clockify will update instantly.
• The default timezone is initially taken from the IdP. However, if a user manually changes their timezone in Clockify (e.g., while traveling), Clockify remains the source of truth for that setting and will not overwrite it.

For Groups: #

• Groups are created or deleted in Clockify based on your IdP setup.
• Users are automatically added to or removed from Clockify groups when their group membership changes in the IdP.
• Group names will always match the naming convention used in your IdP.