Glossary

SCIM

System for Cross-domain Identity Management

A protocol for provisioning users and groups; disabling a directory user does not by itself prove that application sessions and queued work have been revoked.

Defined in: RFC 7644 · RFC 7643

Covered in

Guide

SCIM deprovisioning: make account disablement remove every usable authority

Connect SCIM resource updates to current sessions, tokens, group-derived permissions and background jobs, with explicit tenant mapping, CAEP revocation events and a measurable revocation contract.

Practice: Local project: Prove deprovisioning reaches sessions and queued work