Skip to content
ChaosDesk Support

Provision users with SCIM

Updated Nov 6, 2026

Available on: Enterprise. This feature is in beta: it is still being built and may change.

SCIM lets your identity provider (IdP), such as Okta or Microsoft Entra ID, manage your agents in ChaosDesk: create them when they join, update them, and suspend them when they leave. ChaosDesk supports SCIM 2.0 for users and groups.

The admin screen for SCIM is being built. This article describes the connection as it works today.

Connect your IdP

In your IdP's SCIM app, enter:

  • the base URL: https://your-workspace.chaosdesk.io/scim/v2;
  • a bearer token created for SCIM in your workspace's security settings.

Each token belongs to one workspace and only works on that workspace's address.

What the IdP can do

  • Users: create, read, update (PUT or PATCH) and delete. Deleting or deactivating a user suspends the agent, so they can no longer sign in, including with SAML.
  • Groups: create, read, update and delete ChaosDesk groups and their members.
  • Filtered lookups, so the IdP can match existing agents by user name or email.

Good to know

Related

Was this article helpful?

Still need help?

Submit a request