---
schema_version: "1"
id: 3994be096a9ecec85f36feb1d164706c02d059cbc12f4545241ca520234f5016
title: Manage Salesforce User Identities with SCIM
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/identity_scim_overview.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_overview.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 2a5aacfd9a82c7d05f211c75a92dc30ea401f5fe0b3c511c427f7cf5758f4500
description: You can provision and manage your Salesforce user identities across systems with the open standard System for Cross-Domain Identity Management (SCIM). The Salesforce implementation provides extensions to the SCIM 2.0 specification so that you can edit and manage Salesforce user properties using REST API operations.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Manage Salesforce User Identities with SCIM

You can provision and manage your Salesforce user identities across systems with the open standard System for Cross-Domain Identity Management (SCIM). The Salesforce implementation provides extensions to the SCIM 2.0 specification so that you can edit and manage Salesforce user properties using REST API operations.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All</strong> Editions</td></tr></tbody></table>

For more information about SCIM and REST API, see the [SCIM 2.0 Specification](http://www.simplecloud.info/#Specification.html) and the [Salesforce REST API Developer’s Guide](https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_what_is_rest_api.htm).

Use the following topics to navigate the Salesforce implementation of SCIM.

- **[SCIM and REST API Reference Sheet](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_rest_api.htm&release=264.0.0&type=5)**  
    To manage Salesforce user objects with SCIM, you can send REST API create, read, update, and disable (CRUD) operations to SCIM endpoints. You must supply an OAuth 2.0 access token to perform these operations.
- **[Understand the SCIM Implementation](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_implementation.htm&release=264.0.0&type=5)**  
    Before provisioning and managing users with SCIM, get familiar with the Salesforce SCIM implementation. For example, see the available services and schema and learn about supported resource types, entitlements, roles, and groups.
- **[Example: Create Users with SCIM](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_create_users.htm&release=264.0.0&type=5)**  
    To create a user object with SCIM, send a POST request to the Users endpoint.
- **[Examples: Update Users with SCIM](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_update_users.htm&release=264.0.0&type=5)**  
    After creating a user object, you can update its fields. To update a user object, send a PATCH request to the Users endpoint.
- **[Examples: Deactivate and Reactivate Users with SCIM](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_deactivate_reactivate_user.htm&release=264.0.0&type=5)**  
    In Salesforce, you deactivate user objects rather than deleting them. By deactivating a user object, the user’s active status becomes `false`. Even though you can still query the user object, the user can’t log in to Salesforce with the deactivated account. To allow a user to log in, you can reactivate their account.
- **[Examples: Manage Group Members with SCIM](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_manage_groups.htm&release=264.0.0&type=5)**  
    You can use SCIM to manage a group by adding or removing members.