Skip to content
Verifycate
Start for free

Enterprise identity

Provision members and roles from your identity provider

Create, update, and deactivate workspace members with SCIM 2.0, map directory groups to roles, and revoke sessions on deprovisioning. SCIM works independently of SSO.

Manual invites leave a gap at offboarding. SCIM 2.0 lets the identity provider push users and groups into Verifycate, so membership follows the directory instead of a spreadsheet. It works independently of SSO, which means an organisation can sync members and roles even when those members sign in with email or Google.

How it works

SCIM Provisioning

  1. 01

    Create a SCIM token

    Generate a per-workspace bearer token in Settings and paste the SCIM base URL and token into your identity provider. The raw token is shown once; only its hash is stored, and a token can be revoked.

  2. 02

    Connect the directory

    The identity provider creates, updates, and deactivates users and groups through SCIM 2.0. Verifycate resolves each user to a global account and a workspace membership.

  3. 03

    Map groups to roles

    Map a directory group to admin, manager, issuer, or support. The highest-privilege mapped group wins. Deactivation removes access and revokes the member's sessions immediately.

Event examples

Where this workflow helps

  • An HR offboarding flow removes certificate access the same day
  • A registrar group gets manager access while student workers get support
  • A contractor group is deprovisioned without a manual dashboard cleanup

For event organisers

See it in your event context

For universities

Universities and higher education

Issue verifiable certificates for courses, conferences, workshops, student activities, and microcredentials. Design a template, import a cohort, handle late requests and corrections, and give every student a public page they can keep.

See the event workflow

For event organisers

Conferences and events

Prepare and issue conference certificates by recipient group. Add event branding, sponsor details, QR verification, and public certificate pages.

See the event workflow

For training organisers

Training programmes and bootcamps

Prepare and issue certificates for bootcamps, cohort-based courses, and workplace training. Organise learner details, course information, and completion recognition in a batch.

See the event workflow

Common questions

Does SCIM require SSO?
No. SCIM is for provisioning members and groups; SSO is for signing in. They work independently, so members can be provisioned over SCIM while signing in with email or Google.
What happens when someone is deactivated?
Their workspace membership is marked inactive and their refresh sessions are revoked. They can no longer use the workspace, and their existing certificate pages are unaffected.
Which workspace roles can a group map to?
Admin, manager, issuer, or support. If a member belongs to several mapped groups, the highest-privilege mapping wins.
Is SCIM available on the free plan?
No. SCIM provisioning is a Pro feature. If Pro lapses, SCIM calls stop; existing members remain in the workspace.
Can SCIM create accounts outside our workspace?
No. SCIM membership is scoped to the workspace that owns the token; the same person can belong to other workspaces separately.

Try scim provisioning with your event

Start with 300 free credits. No card required.

Start for free See pricing