Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.siftstack.com/llms.txt

Use this file to discover all available pages before exploring further.

Connect an external Identity Provider (IdP) to Sift to manage users and groups centrally. When changes occur in the IdP, such as creating, deleting, or renaming users or groups, or modifying group memberships, those changes are automatically synchronized to Sift.

​
Before you begin

  • You have contacted your Sift account representative to complete the initial IdP configuration
  • Your IdP supports push-based provisioning

​
How IdP integration works

Sift connects to your IdP using SCIM (System for Cross-domain Identity Management), a standard protocol for automating user and group provisioning. To connect your IdP, you need two credentials from Sift:
  • An access token: used to authenticate those requests
  • A SCIM endpoint URL: the address your IdP sends provisioning requests to
Once connected, Sift synchronizes with your IdP automatically every 24 hours. Administrators can also trigger a manual sync at any time. Groups synchronized from an IdP are called external groups in Sift. Their membership and attributes remain controlled by the IdP, though permissions can be managed in Sift.

​
Connect your Identity Provider (IdP)

  1. Click your profile icon.
  2. Select Manage.
  3. Click Manage Identity Provider.
  4. Click Generate Token to generate an access token for IdP verification.
  5. In the SCIM Server URL section, click Copy to copy the SCIM endpoint URL.
  6. Use the token and SCIM URL to configure your IdP.

​
Optional: Synchronize your organization manually

Trigger a manual sync to apply changes from your IdP to Sift without waiting for the next automatic sync.
Synchronizing: When synchronizing Sift with your organization, the system will update your account to match the IdP’s data, which may create new users or deactivate existing ones, create or delete external groups, and add or remove users from those external groups. All changes are determined by your IdP’s current configuration.
  1. Click your profile icon.
  2. Select Manage.
  3. Click Manage Identity Provider.
  4. Click Sync Organization.

​
Optional: View token history

View the history of generated tokens used for IdP verification.
  1. Click your profile icon.
  2. Select Manage.
  3. Click Manage Identity Provider.
  4. Click Open.

​
Next steps

​
Reference