#40 SCIM - The Protocol That Finally Made Provisioning Grow Up

0-40% of SaaS accounts in the mid-2000s belonged to people who'd already left the company. Ghost accounts, quietly sitting there — and that sadly hasn't changed much today.This episode: where SCIM came from, what it actually solves, and what it still doesn't.Core RFCs:RFC 7642 — SCIM: Definitions, Overview, Concepts, and RequirementsRFC 7643 — SCIM: Core SchemaRFC 7644 — SCIM: ProtocolKey Terms Covered:SCIM 2.0 — System for Cross-domain Identity ManagementJML — Joiner-Mover-Leaver lifecycleIGA — Identity Governance and AdministrationIDP — Identity Provider (Okta, Entra ID, Ping, JumpCloud, OneLogin)JIT — Just-In-Time provisioningSPML — Service Provisioning Markup Language (the predecessor that didn't make it)PatchOp — SCIM's structured partial update formatServiceProviderConfig — SCIM's capability discovery endpointTools Mentioned:Identity Providers: Okta, Microsoft Entra ID, Ping Identity, JumpCloud, OneLogin, CyberArk IdentityIGA Platforms: SailPoint, Saviynt, IBM Security Verify Governance, Omada IdentityKey SCIM-enabled Apps: Slack, Salesforce, GitHub, GitLab, Workday, ServiceNow, Snowflake, Zoom, Box, AtlassianSCIM Validator:scimvalidator.net — for testing SCIM endpoint complianceLinkedIn: https://www.linkedin.com/in/rohit-agnihotriEmail: [email protected]