Integrations
SCIM provisioning and the SCIM Gateway
SCIM is the open standard an identity system uses to create, change and delete accounts in an application. KoppelHet uses Joinly for this, whose SCIM Gateway also connects applications without their own SCIM support to Microsoft Entra ID and the HR system.
What it is
SCIM (System for Cross-domain Identity Management) defines in RFC 7643 and 7644 how users and groups are exchanged between systems through a REST API. Microsoft Entra ID can provision accounts to applications through SCIM. That only works if the application has a SCIM endpoint, and not every application does.
Microsoft also offers the reverse route: API-driven inbound provisioning, where an HR system sends users to Entra ID as a SCIM bulk request. You then have to build the client that reads the HR system and packages the data yourself.
How Joinly handles it
- The SCIM Gateway makes systems SCIM-compatible, so they can be connected through Entra provisioning.
- A flexible mapping translates HR fields into application fields.
- All actions through the gateway are logged.
- The gateway can run in cloud and on-premises environments.
- Applications that support SCIM themselves are provisioned directly through SCIM or their API.
What KoppelHet does
With API-driven inbound provisioning the work is on the HR side: reading the HR system, picking the right employees and contracts and filling the fields correctly. That is what KoppelHet builds, and in Joinly that HR side is included as standard.
Joinly
Continue at Joinly
Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.
Common integrations
Frequently asked questions
What is SCIM?
An open standard (RFC 7643 and 7644) for exchanging users and groups through a REST API. An identity system uses it to create, change and delete accounts in an application.
Does every application need SCIM?
No. Joinly also provisions through a direct API connection. The SCIM Gateway is for applications that have to be provisioned through Entra ID but have no SCIM of their own.
Can the SCIM Gateway run on-premises?
Yes. The gateway can run in cloud and on-premises environments.
More on Identity and access management
Identity and access management: the overview
Lifecycle
Roles and governance
Integrations
- HR as the sourceThe HR system decides who gets an account, with which data.
- Microsoft Entra IDAccounts, groups and licences in Entra ID from HR.
- Active DirectoryOn-premises AD and hybrid Exchange through an agent without an open port.
- Application provisioningAccounts and roles in your business applications, from HR.
- SCIM and SCIM GatewayThe provisioning standard, also for applications without SCIM.
Compliance and sectors
- NIS2 and the Dutch Cyber Security ActWhat the duty of care asks of access management, and what it does not.
- IAM in educationSchool board staff, ready for the IBP standards framework.
- IAM in governmentMunicipalities, provinces and water boards, with BIO and ENSIA.
- IAM in healthcareFlexible staff, multiple contracts and NEN 7510.