{"meta":{"title":"Provisioning accounts with SCIM","intro":"Learn how to provision accounts and manage organization and team membership for users on your GitHub Enterprise Server instance.","product":"Enterprise administrators","breadcrumbs":[{"href":"/en/enterprise-server@3.21/admin","title":"Enterprise administrators"},{"href":"/en/enterprise-server@3.21/admin/managing-iam","title":"Identity and access management"},{"href":"/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim","title":"Provision accounts with SCIM"}],"documentType":"subcategory"},"body":"# Provisioning accounts with SCIM\n\nLearn how to provision accounts and manage organization and team membership for users.\n\n## Links\n\n* [About user provisioning with SCIM on GitHub Enterprise Server](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/user-provisioning-with-scim-on-ghes)\n\n  Learn about managing the lifecycle of user accounts with SCIM on GitHub.com.\n\n* [Configuring SCIM provisioning to manage users](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/configuring-scim-provisioning-for-users)\n\n  You can manage the lifecycle of your enterprise's user accounts from your identity provider (IdP) using System for Cross-domain Identity Management (SCIM).\n\n* [Migrating from LDAP to SAML with SCIM](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/migrating-from-ldap-to-saml-with-scim)\n\n  Learn how to migrate your GitHub Enterprise Server instance from LDAP authentication to SAML single sign-on with SCIM provisioning for centralized user management.\n\n* [Configuring authentication and provisioning with Entra ID](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/configuring-authentication-and-provisioning-with-entra-id)\n\n  You can use a tenant in Microsoft Entra ID (previously known as Azure AD) as an identity provider (IdP) to centrally manage authentication and user provisioning for GitHub.com.\n\n* [Configuring authentication and provisioning with PingFederate](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/configuring-authentication-and-provisioning-with-pingfederate)\n\n  Set up PingFederate as an identity provider (IdP) for Enterprise Managed Users on GitHub.com or GHE.com.\n\n* [Configuring authentication and provisioning with Okta](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/configuring-scim-provisioning-with-okta)\n\n  Learn how to configure Okta to communicate with your enterprise.\n\n* [Disabling SCIM provisioning for users](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/disabling-scim-provisioning-for-users)\n\n  You can disable SCIM provisioning for your enterprise's user accounts.\n\n* [Provisioning users and groups with SCIM using the REST API](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/provisioning-users-and-groups-with-scim-using-the-rest-api)\n\n  Manage the lifecycle of user accounts from your identity provider using GitHub's REST API for System for Cross-domain Identity Management (SCIM).\n\n* [Managing team memberships with identity provider groups](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/managing-team-memberships-with-identity-provider-groups)\n\n  Connect IdP groups with teams on GitHub to manage team and organization membership through your identity provider.\n\n* [Deprovisioning and reinstating users with SCIM](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/deprovisioning-and-reinstating-users)\n\n  Learn details about deprovisioning or reinstating users.\n\n* [Troubleshooting team membership with identity provider groups](/en/enterprise-server@3.21/admin/managing-iam/provisioning-user-accounts-with-scim/troubleshooting-team-membership-with-identity-provider-groups)\n\n  If you manage team membership using groups on your identity provider (IdP), but team membership is not in sync, you can troubleshoot the problem."}