Cloud SSO now includes the SCIMWeb and SCIMDesktop components for automated user provisioning. SCIM (System for Cross-domain Identity Management) lets identity providers like Microsoft Entra ID and Okta create, update, and deactivate users and groups in your application as changes are made in the directory.
The components implement the service provider side of SCIM 2.0. SCIMWeb plugs into an existing web application, and SCIMDesktop hosts its own HTTP server for desktop applications and background services.
The SCIM Getting Started Guide covers setup, authentication, and registering your application with an identity provider. SAMLWeb and SAMLDesktop now also support encrypted assertions. Set the new ServiceProviderEncryptingCert property, and the components decrypt the assertion in the identity provider's SAML response before parsing it.