Starters added, leavers removed, automatically
With JobTek Professional, your identity provider keeps JobTek users in step with your staff list through SCIM and account creation at first sign-in.
What is user provisioning?
User provisioning simply means giving people the accounts they need, and deprovisioning means taking them away when they leave. Done by hand, it's easy to forget a step, and a leaver who can still sign in is one of the most common security gaps in any business.
SCIM, short for System for Cross-domain Identity Management, is the open standard that automates it. Your identity provider becomes the single source of truth: add someone there and their JobTek account is created; change their name and JobTek is updated; remove them or switch them off and their JobTek access goes too. No forgotten accounts, no manual clean-ups.
How it works behind the scenes
- 1You change your staff list
Someone joins, changes role or leaves, and you update them in your identity provider as normal.
- 2Your provider tells JobTek
Your identity provider sends the change straight to JobTek's secure SCIM address, using a private token only it holds.
- 3JobTek updates the account
The account is created, updated or switched off in JobTek, with no action needed from anyone.
Two ways to provision
Created at first sign-in
New staff get a JobTek account the first time they sign in through your identity provider.
SCIM
Your identity provider adds, updates and removes JobTek users itself, as soon as your staff list changes.
A dedicated token
SCIM connects with its own secret token, which administrators can rotate at any time.
The terms explained
Provisioning and deprovisioning
Creating accounts for people who need them, and removing them for people who don't.
SCIM
System for Cross-domain Identity Management. The open standard identity providers use to manage user accounts in other apps.
Single source of truth
One place, your identity provider, where your staff list is kept, with every other app following it.
SCIM endpoint
The secure web address in JobTek that your identity provider sends changes to.
Token
A long, secret key that proves the changes really came from your identity provider. Administrators can replace it at any time.
Setting up SCIM
- 1Enable
Turn on SCIM in your company's enterprise sign-in settings.
- 2Copy
Copy the SCIM endpoint and token into your identity provider.
- 3Assign
Assign the people who should have JobTek in your identity provider.
- 4Done
Your provider keeps JobTek in step from then on.
Questions about provisioning
Which plan includes it?
JobTek Professional, alongside single sign-on.
Do we need SCIM to use single sign-on?
No. Single sign-on works on its own, and SCIM adds automatic removal of leavers.
What happens to a leaver's work?
Their jobs, notes and history stay on your records.
Let your identity provider do the admin
Start a free JobTek Professional trial and connect SCIM in minutes.