Deploy scim bridge only for offboarding?

Hi Chris,

That is not possible. If you set up the SCIM bridge and configure it with an IdP integration, the IdP will send requests to your bridge for all user events in configured groups. I would suggest setting up a SCIM bridge, and then creating a specific group for 1P users and provisioning users in and out of that. Deactivating a user will deactivate them in 1P, and you'll only control users that are in the 1P users group.

sad

OK. thy for your help.

@"laz.h_1P" do you know what scim does with users that have been added manually?
1) the ones with a matching email
2) the ones without?

Sure thing!

When you first set up the SCIM integration on your IdP, nothing will happen. You have to choose which groups you want to be synced, and only then will changes start to reflect in your 1P account. Once you configure a group that has existing (manually added) 1P users in it, the state of those users will simply change to reflect the IdP state. For users that do not yet exist, they will be invited to 1P after being added to a synced group.

Hope this helps