{"id":44088,"date":"2020-02-08T09:00:00","date_gmt":"2020-02-08T16:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=44088"},"modified":"2020-04-28T10:44:20","modified_gmt":"2020-04-28T16:44:20","slug":"jit-scim-provisioning-comparison","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison","title":{"rendered":"Difference Between JIT and SCIM Provisioning"},"content":{"rendered":"\n<p>Web application provisioning has changed dramatically in the last two decades, and new protocols have cropped up to help IT admins better manage enterprise app access. In the modern enterprise, streamlining these processes helps time-strapped IT admins onboard users more quickly. First we\u2019ll cover app provisioning as it was historically, and then we\u2019ll compare two protocols that are newer to the scene: Just-in-Time (JIT) and System for Cross-domain Identity Management (SCIM) provisioning.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">History of Web Application Provisioning<\/h2>\n\n\n\n<p>Software-as-a Service (SaaS) applications (think: Salesforce<sup>\u00ae<\/sup>) <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.youtube.com\/watch?v=2JKKaa8NXG0\" target=\"_blank\">sent shockwaves through the IT industry<\/a> in the 1990s. They changed the way software was delivered to companies and challenged the traditional Active Directory<sup>\u00ae<\/sup> domain because AD didn\u2019t extend natively to them.<\/p>\n\n\n\n<p>These apps required manual access management because AD was built for on-prem domains \u2014 not cloud services. Eventually, a new protocol, <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-saml\/\">SAML (Security Assertion Markup Language)<\/a>, and various third-party vendors emerged to federate AD identities to these apps.<\/p>\n\n\n\n<p>As the use of SaaS apps has continued to increase since then, admins now search for solutions that not only allow them to use authoritative identities in these apps but that also allow them to streamline the process of account management. Several protocols exist to make the process of user lifecycle management in web apps easier \u2014 though they differ in key ways.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">JIT Provisioning<\/h2>\n\n\n\n<p>One such protocol is Just-in-Time provisioning, which extends the SAML protocol to pass user attributes from the central identity provider to apps like Salesforce.<\/p>\n\n\n\n<p>From the central directory, an IT admin can create new users and authorize their app access \u2014 rather than creating a new user in the central directory, authorizing their app access, and then creating a corresponding account for that user in the app(s).<\/p>\n\n\n\n<p>Instead, users trigger the creation of those accounts automatically the first time they log in to an app. Before JIT, this kind of automation was not possible, and each account required manual creation by an IT admin or manager. SCIM provisioning, by comparison, takes automation to the next level.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SCIM Provisioning<\/h2>\n\n\n\n<p>SCIM is an API-driven identity management protocol that uses HTTP verbs to standardize identities among identity and service providers.\u00a0\u00a0<\/p>\n\n\n\n<p>With SCIM, admins create new users in the central directory, and they can automate both onboarding and offboarding of those users in their authorized apps through an ongoing sync. They can also sync updates like passwords and attribute information. If a user leaves the organization, for example, deleting them from the central directory will automatically propagate to the apps they accessed and delete their accounts without requiring manual configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">JIT vs. SCIM Provisioning<\/h2>\n\n\n\n<p>JIT provisioning automates account creation, while SCIM provisioning automates provisioning, deprovisioning, and management. In either case, it\u2019s important to note that the service provider must support the particular protocol for it to be possible. Currently, more apps support JIT than SCIM.&nbsp;<br><\/p>\n\n\n\n<p>Regardless, any steps an organization can take to automate onboarding and\/or offboarding of users streamlines day-to-day IT operations, increases accuracy, and improves security \u2014 particularly in the case of large or scaling organizations that are adding users quickly.<\/p>\n\n\n\n<p>You can achieve automation from a cloud directory service, which also enables you to provision users seamlessly to their other resources, including systems, networks, and file servers. Learn more about <a href=\"https:\/\/jumpcloud.com\/product\/single-sign-on\/\">app provisioning from a cloud directory service<\/a>.&nbsp;<br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web application provisioning has changed dramatically in the last two decades, and new protocols have cropped up to help IT [&hellip;]<\/p>\n","protected":false},"author":89,"featured_media":44089,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23,2337],"tags":[],"collection":[2780],"platform":[],"funnel_stage":[3016],"coauthors":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Difference Between JIT and SCIM Provisioning - JumpCloud<\/title>\n<meta name=\"description\" content=\"JIT and SCIM provisioning can play a vital role in automating workflows and improving web app access in your IT organization.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Difference Between JIT and SCIM Provisioning\" \/>\n<meta property=\"og:description\" content=\"JIT and SCIM provisioning can play a vital role in automating workflows and improving web app access in your IT organization.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2020-02-08T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-04-28T16:44:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"521\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cassa Niedringhaus\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cassa Niedringhaus\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\"},\"author\":{\"name\":\"Cassa Niedringhaus\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/a1d99d1a0c59bccda454540d642bd562\"},\"headline\":\"Difference Between JIT and SCIM Provisioning\",\"datePublished\":\"2020-02-08T16:00:00+00:00\",\"dateModified\":\"2020-04-28T16:44:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\"},\"wordCount\":555,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg\",\"articleSection\":[\"Best Practices\",\"Remote Work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\",\"url\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\",\"name\":\"Difference Between JIT and SCIM Provisioning - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg\",\"datePublished\":\"2020-02-08T16:00:00+00:00\",\"dateModified\":\"2020-04-28T16:44:20+00:00\",\"description\":\"JIT and SCIM provisioning can play a vital role in automating workflows and improving web app access in your IT organization.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg\",\"width\":780,\"height\":521,\"caption\":\"The Difference Between JIT and SCUM Provisioning\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Difference Between JIT and SCIM Provisioning\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/a1d99d1a0c59bccda454540d642bd562\",\"name\":\"Cassa Niedringhaus\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/47c9209225a9cda7d94451f40f9aa273\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b5b22cb0dac3c3ae9baa4ea62d05c76e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b5b22cb0dac3c3ae9baa4ea62d05c76e?s=96&d=mm&r=g\",\"caption\":\"Cassa Niedringhaus\"},\"description\":\"Cassa is a product marketing specialist at JumpCloud with a degree in Magazine Writing from the University of Missouri. When she\u2019s not at work, she likes to hike, ski and read.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Difference Between JIT and SCIM Provisioning - JumpCloud","description":"JIT and SCIM provisioning can play a vital role in automating workflows and improving web app access in your IT organization.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison","og_locale":"en_US","og_type":"article","og_title":"Difference Between JIT and SCIM Provisioning","og_description":"JIT and SCIM provisioning can play a vital role in automating workflows and improving web app access in your IT organization.","og_url":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison","og_site_name":"JumpCloud","article_published_time":"2020-02-08T16:00:00+00:00","article_modified_time":"2020-04-28T16:44:20+00:00","og_image":[{"width":780,"height":521,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg","type":"image\/jpeg"}],"author":"Cassa Niedringhaus","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cassa Niedringhaus","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison"},"author":{"name":"Cassa Niedringhaus","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/a1d99d1a0c59bccda454540d642bd562"},"headline":"Difference Between JIT and SCIM Provisioning","datePublished":"2020-02-08T16:00:00+00:00","dateModified":"2020-04-28T16:44:20+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison"},"wordCount":555,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg","articleSection":["Best Practices","Remote Work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison","url":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison","name":"Difference Between JIT and SCIM Provisioning - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg","datePublished":"2020-02-08T16:00:00+00:00","dateModified":"2020-04-28T16:44:20+00:00","description":"JIT and SCIM provisioning can play a vital role in automating workflows and improving web app access in your IT organization.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/02\/jit-scim-provisioning.jpg","width":780,"height":521,"caption":"The Difference Between JIT and SCUM Provisioning"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/jit-scim-provisioning-comparison#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Difference Between JIT and SCIM Provisioning"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/a1d99d1a0c59bccda454540d642bd562","name":"Cassa Niedringhaus","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/47c9209225a9cda7d94451f40f9aa273","url":"https:\/\/secure.gravatar.com\/avatar\/b5b22cb0dac3c3ae9baa4ea62d05c76e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b5b22cb0dac3c3ae9baa4ea62d05c76e?s=96&d=mm&r=g","caption":"Cassa Niedringhaus"},"description":"Cassa is a product marketing specialist at JumpCloud with a degree in Magazine Writing from the University of Missouri. When she\u2019s not at work, she likes to hike, ski and read.","sameAs":["https:\/\/jumpcloud.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/44088"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/89"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=44088"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/44088\/revisions"}],"predecessor-version":[{"id":45996,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/44088\/revisions\/45996"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/44089"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=44088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=44088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=44088"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=44088"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=44088"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=44088"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=44088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}