#40 SCIM - The Protocol That Finally Made Provisioning Grow Up

0-40% of SaaS accounts in the mid-2000s belonged to people who'd already left the company. Ghost accounts, quietly sitting there — and that sadly hasn't changed much today.
This episode: where SCIM came from, what it actually solves, and what it still doesn't.
• Core RFCs:
RFC 7642 — SCIM: Definitions, Overview, Concepts, and Requirements
RFC 7643 — SCIM: Core Schema
RFC 7644 — SCIM: Protocol

• Key Terms Covered:
SCIM 2.0 — System for Cross-domain Identity Management
JML — Joiner-Mover-Leaver lifecycle
IGA — Identity Governance and Administration
IDP — Identity Provider (Okta, Entra ID, Ping, JumpCloud, OneLogin)
JIT — Just-In-Time provisioning
SPML — Service Provisioning Markup Language (the predecessor that didn't make it)
PatchOp — SCIM's structured partial update format
ServiceProviderConfig — SCIM's capability discovery endpoint

• Tools Mentioned:
Identity Providers: Okta, Microsoft Entra ID, Ping Identity, JumpCloud, OneLogin, CyberArk Identity
IGA Platforms: SailPoint, Saviynt, IBM Security Verify Governance, Omada Identity
Key SCIM-enabled Apps: Slack, Salesforce, GitHub, GitLab, Workday, ServiceNow, Snowflake, Zoom, Box, Atlassian

• SCIM Validator:
scimvalidator.net — for testing SCIM endpoint compliance

LinkedIn: linkedin.com/in/rohit-agnihotri
Email: theIdentityNavigator@gmail.com