SCIM Concepts
Core SCIM concepts in Statsig, including users, groups, role mappings, and how provisioning sync works between your identity provider and Statsig.
The Statsig SCIM implementation represents Statsig users at both the organization level and project level with their associated roles. There are two major resources in the SCIM implementation: Users and Groups.
Users
Users in SCIM correspond to Statsig users at the organization level. Statsig recognizes users who are part of the Statsig organization and have the organization email domain as SCIM users. Each user has the following attributes:
- First name
- Last name
- Email address (main identifier, must be unique within the IdP)
- Statsig ID (used by the IDP to identify the user in the Statsig SCIM API)
Groups
Groups in SCIM represent Statsig Projects with specific roles. For example, SCIM represents a project named "Project A" with a role of "Admin" as a group. The group name for this example project is Statsig-ProjectA-Admin.
Team x role groups
Team x Role Groups are a special type of group that represent Statsig Teams with specific roles. For example, SCIM represents a team named "Team A" with a role of "Admin" as a group. The group name for this example team is Statsig-ProjectName-TeamA-Admin.
Important notes about groups:
- SCIM doesn't support project-level deletion. SCIM supports team-level deletion.
- SCIM doesn't support updating group names.
General mapping between SCIM and Statsig
Was this helpful?