Do I need SCIM if I already have SSO login working?

Not necessarily. SSO and SCIM solve different problems, so whether you need SCIM depends on what you want to automate.

SSO (Single Sign-On)

• Handles authentication: “Can this user sign in?”
• Usually via SAML, OIDC, or similar
• Good for:
  • centralized login
  • MFA
  • reducing password use

SCIM (System for Cross-domain Identity Management)

• Handles provisioning and lifecycle management: “Should this user have an account here, and what role should they have?”
• Used to:
  • automatically create users
  • update user attributes/groups
  • deactivate users when they leave
  • keep access in sync with your IdP/HR system

Do you need SCIM?

You likely need SCIM if you want:

• automatic onboarding/offboarding
• group/role sync
• reduced manual admin work
• faster access removal for compliance/security

You may not need SCIM if:

• you only care about login
• you can manage accounts manually
• your user base is small
• access changes are infrequent

Common reality

Many orgs use:

• SSO for login
• SCIM for provisioning/deprovisioning

If you want, I can also help you decide based on your setup (e.g., Okta/Azure AD/Google Workspace + your app).