Skip to content

SCIM Provisioning Overview

What is SCIM?

SCIM (System for Cross-domain Identity Management) is an open standard that allows for the automation of user provisioning and deprovisioning between identity providers and service providers. With SCIM, organizations can automatically manage user access to Bruno based on their identity provider configurations.

Benefits of SCIM with Bruno

Automated User Management

  • Automatic provisioning: New users are automatically granted Bruno licenses when added to your identity provider
  • Automatic deprovisioning: Users lose access to Bruno when removed from your identity provider

Enhanced Security

  • Centralized access control: Manage Bruno access through your existing identity management system
  • Reduced manual errors: Eliminate manual license assignment and removal processes
  • Audit trail: Track all provisioning and deprovisioning activities in your identity provider

Operational Efficiency

  • Streamlined onboarding: New employees automatically receive Bruno access as part of their standard onboarding
  • Simplified offboarding: Departing employees automatically lose Bruno access
  • Reduced administrative overhead: IT teams spend less time on manual license management

Enabling SCIM Provisioning

Prerequisites

You must have Ultimate Edition with SCIM provisioning enabled before you can configure SCIM for your Bruno team.

Enabling SCIM in Bruno

  1. Navigate to the Bruno license portal: https://license.usebruno.com/
  2. Click Settings in the navigation menu
  3. Select SCIM Provisioning from the settings page
  4. Toggle Enable SCIM to turn it on

Enable SCIM in Bruno license portal

Generating SCIM API Key

  1. Under SCIM Provisioning, note the SCIM Base URL: https://license.usebruno.com/scim/v2
  2. Click Generate New API Key
  3. Copy your new API key for later use when configuring your identity provider - this key will not be shown again

Generate SCIM API Key in Bruno license portal

You can revisit this page to manage your SCIM API keys. The SCIM Base URL and API key will be needed when configuring your identity provider.

Provisioning administrators

In addition to licensed users, SCIM can provision Bruno License Manager administrators. Administrators provisioned this way:

  • Receive portal access to manage licenses, users, and settings
  • Do not consume a license seat
  • Do not appear in the Users list — they appear under Settings → Admins

This suits IT administrators, operations staff, and team leads who manage licensing but do not need a Bruno desktop license themselves.

How Bruno decides

When a user is provisioned, Bruno checks the role values in the request against the Admin Role Mapping configured under Settings → SCIM Provisioning:

Role in the provisioning request Result
Matches a configured admin role Portal administrator. No license issued, no seat consumed.
No match, or no role sent Licensed user. A license is issued and a seat is consumed.

Role values are matched exactly and are case-sensitive. Multiple admin roles can be configured as a comma-separated list; a match against any one of them grants administrator access.

The admin role must be present on the first provisioning call. Bruno decides whether a user is an administrator or a licensed user at the moment the account is created, based on whether a matching role is included in that request.

If a user is created before their role value is available, they are provisioned as a licensed user and consume a license seat. A role arriving in a later update promotes them to administrator, but the license already issued remains in place — Bruno does not revoke a license that has been issued, so that users already working in Bruno desktop are never cut off.

Configure the role mapping in your identity provider so the value is included the first time a user is provisioned. See the Okta and Microsoft Entra ID guides for provider-specific steps.

Next Steps

Ready to configure SCIM? Choose your integration method: