Note
Support for SCIM is available for Uptrends Enterprise accounts.
Find answers to common questions about SCIM provisioning, SSO, permissions, and identity provider support in Uptrends.
For setup steps, see Set up SCIM provisioning in Uptrends. For expected behavior, see SCIM provisioning behavior in Uptrends.
Do I need SSO to use SCIM?
No, but we recommend using both. SCIM and SSO are independent features, and you can use SCIM without SSO.
SCIM keeps operators and operator group membership in sync with your identity provider (IdP). SSO controls how users sign in to Uptrends through your IdP.
Together, they give you centralized identity and access management without maintaining separate Uptrends usernames and passwords for provisioned users.
Can I control which users and groups are synced?
Yes. Sync scope is controlled in your IdP, not in Uptrends.
In Microsoft Entra ID, assign only the users and groups you want provisioned to the Uptrends enterprise application, and use Sync only assigned users and groups unless you intentionally want full-directory sync. Other IdPs provide similar assignment or filter controls.
What happens when a user is removed from a group or deactivated in our IdP?
Changes are applied on the next provisioning cycle. Sync is not instant. For example, Microsoft Entra ID typically syncs about every 40 minutes.
- If a user is removed from an IdP group, Uptrends removes that operator from the matching SCIM-managed operator group.
- If a user is deactivated in the IdP or unassigned from the Uptrends application, Uptrends deprovisions and removes the SCIM-managed operator.
Manual operators are not deleted by SCIM.
Will SCIM delete users that already exist in Uptrends?
No. Enabling SCIM does not bulk-delete existing manual operators. If your IdP later provisions a matching user, Uptrends can adopt that operator into SCIM management. After adoption, IdP deprovisioning removes the operator.
For details, see How SCIM interacts with manual operators.
Can I test before going live?
Yes. Use a controlled rollout before you sync your full directory:
- Complete SCIM setup in a non-production Uptrends account when possible.
- In your IdP, use scoped provisioning (for example, set Sync only assigned users and groups in Microsoft Entra ID).
- Assign a small pilot set of users and groups to the Uptrends enterprise application.
- Verify operators, groups, and membership in Uptrends before widening scope.
Contact Uptrends Support if you need a dedicated sandbox account for integration testing.
Can we set Uptrends permissions in our IdP?
No. SCIM syncs identity and group membership only. You can assign permissions in Uptrends after groups are synced.
For the full split of responsibility, see Permissions management.
Is there a fallback if SCIM fails?
Yes. Administrators can still create and manage operators manually in Uptrends.
Manual and SCIM-managed operators and groups can coexist in the same account. If SCIM provisioning is interrupted or misconfigured, you can continue administering access in Uptrends while you restore the IdP connection.
What if we use an IdP other than Entra or Okta?
Microsoft Entra ID and Okta are the primary IdPs validated with Uptrends. Other SCIM 2.0-compliant providers should work at the protocol level.
If you use a different IdP, contact Uptrends Support with your provider details.
Will new SCIM users receive an invitation email from Uptrends?
Only if an administrator enables the Send welcome email to new operators SCIM setting. This option is disabled by default.
When the setting is enabled, Uptrends sends an invitation email to each new operator created by SCIM so they can set up their account. Operators that already exist in Uptrends and are later adopted into SCIM management do not receive this email.
If the setting stays disabled, SCIM still creates the operator, but Uptrends does not send an invitation email.