Udemy for Business supports user and group access and identity management with the System for Cross-domain Identity Management (SCIM) standard. SCIM is used by Single Sign-On (SSO) services and Identity Providers to manage people across a variety of apps and tools, including Udemy for Business.
What you can do with SCIM:
- Grant access to users and groups (provisioning)
- Deactivate users and groups (deprovisioning)
- Change user details: name, email address
- Create, remove or edit groups
- Manage group membership (users changing groups)
What you cannot do with SCIM:
- Delete User PII - this is dependent on the Identity Provider.
- In Okta you cannot Delete User PII with SCIM. You can, however, do this in the Udemy for Business platform once the user has been unassigned the Udemy for Business app, or deactivated in the Identity Provider.
- In Azure AD you can Delete User PII with SCIM by permanently deleting the user in Azure AD.
- Sync data from Udemy for Business back to the Identity Provider
Once you take any of the above actions, the data or change will automatically update in Udemy for Business.
Your SCIM integration setup will vary depending on the identity provider you use.
Udemy for Business supports SCIM Provisioning for the key identity providers and SSO services that offer access and identity management.
SCIM Provisioning is available to Enterprise Plan customers using Single Sign-on (SSO).
Note: Users provisioned through SCIM in your SSO service will not take up a license until they join Udemy for Business by signing in for the first time.
If you wish to disconnect a learner from being managed by your IdP with SCIM, you can do so by deleting the learner's PII in your Udemy for Business account.
If you need to manage a learner directly from within your Udemy for Business account and not via your SSO IdP, and further, you do not wish to delete their PII, please reach out to firstname.lastname@example.org for further assistance.
How to enable SCIM provisioning
To enable SCIM provisioning for your Udemy for Business account, go to your Udemy for Business account to Manage > Settings > Provisioning (SCIM).
Scroll to the SCIM Integration section. Next, follow the instructions to enable SCIM, choose your Identity Provider from the dropdown and generate the credentials (Username and Password or Secret/Bearer token), which you then need to input into your Identity Provider as part of the configuration.
Depending on which Identity Provider you use, follow the instructions in the appropriate guide below to complete the SCIM set up.
How to disable SCIM provisioning
To disable SCIM provisioning for your Udemy for Business account (if you’re changing providers or no longer require SCIM) access Manage > Settings > Provisioning (SCIM).
Scroll to the SCIM Integration section and click on the Disable Integration link and follow the instructions to disable SCIM. This will disable the integration from the Udemy for Business side, but your IT team will need to disable the integration from the Identity Provider side also.
You can continue to use Udemy for Business as usual, but you will need to manually update user and group information within the platform from now on.