How Do I Sync Users from My Identity Provider with SCIM?

Last updated: November 15, 2026

With the SCIM Identity Management integration, your identity provider (IdP), such as Okta or Microsoft Entra ID, sends new users and profile changes to Ambition on its own, so admins don't have to enter them by hand. SCIM handles who has an account, while single sign-on handles how they log in, and Ambition must turn SCIM on for your organization before it appears in your integration list.

Required permissions:

  • The Integrations: Edit permission is required to set up the SCIM Identity Management integration.

What User Information Can SCIM Manage?

Ambition will create and update users from the details your IdP sends. Each IdP field must be matched to an Ambition field before it changes anything, so what SCIM updates depends on how those fields were matched for your organization. Once matched, SCIM can update the following employee information in Ambition:

  • First and last name

  • Email address

  • Username

  • System manager or admin permission sets

  • Job title

  • Manager (who they report to)

  • Phone number

  • Start date

  • Birthday

  • Biography

  • Time Zone

  • Profile picture

  • Active status

  • Active status

  • Group memberships

  • Groups that they manage

Information That Cannot be Updated Using SCIM

SCIM cannot assign customer permission sets, so these must either be assigned manually or through another user management method like a CSV upload or the User API. Groups created in your IdP won't become Ambition Groups.

Enable SCIM for Your Organization

Ask Ambition to Make SCIM Available

The SCIM Identity Management integration will not appear on the Integration Management page's Available tab until a member of Ambition's team turns it on. Contact your Customer Success Manager or email GetHelp@Ambition.com to request that it be enabled.

Turn On the SCIM Identity Management Integration

  1. Head to Admin --> Data --> Integrations.

  2. Open the Available tab and type "SCIM" in the Find an integration search box.

  3. Click on Enable next to SCIM Identity Management. The integration's Settings page will open.

  4. Copy the token shown in the SCIM API Token section.

Connect Your Identity Provider

  1. Turn on SCIM provisioning in your IdP's Ambition app.

  2. Enter Ambition's SCIM base URL in your IdP.

  1. Paste the token you copied as the API token.

  2. Assign the employees who need Ambition access to the app.

Related Articles