Question regarding setting up SCIM With Groups/users already created

Hello @Kpatterson777 ,

Thank you for question. Enabling SCIM will not affect the existing users or groups in your 1Password account. SCIM bridge will only synchronize users or groups you are choosing to synchronize from your Identity provider.

Answer for your later concern, SCIM bridge setup will not disturb access of other existing groups for which user is already assigned with access privileges. The group you are synchronizing by SCIM bridge will have access if that group also has access.

Do you mind sharing what identity provider you are trying to connect ?

Thank you for your reply :) It's Azure, and I was concerned from reading prior posts that if I had a user already in a group using a email address already being used in Azure AD, that their access to other non synced groups would be affected.

when adding a user to a test group in 1PW, adding it though managed groups, turning on user provisioning and syncing, does it create the test group in Azure?

Happy to help !

Access for user with same email address who is part of synced groups and other non-synced groups will not be affected by SCIM integration at all.

Additionally, Users that were previously in, will be effected by the new integration and can be suspended, renamed, reactivated etc as part of the behavior in synced groups, regardless of what groups they were in before provided they have same email address.

With SCIM integration you can create/assign groups from your Azure directory and bring them to 1Password by syncing them. Also you can manage existing synced 1Password groups in Azure AD . The reverse is not a SCIM function i.e. a manually created group in 1Password will not be created in Azure.

You'd then want to use the "Import" to re-link the users/groups between Identity Provider(Idp) and 1Password as these sorts of desync can happen.
It's recommended to provision users/groups via Idp.