SCIM
Settings → SCIM: IdP connection, provisioning, and group role mapping.
- IdP ConfigurationSCIM Base URL, OAuth token URL, and API-key credentials on Settings → SCIM.
- Provisioning SettingsSCIM-managed toggle, default role, and identity claim on Settings → SCIM.
- Group Role MappingSettings → SCIM: give each group your identity provider pushes a Guard role, with the highest role winning.