Introduced in GitLab 15.8.
You can use the open standard System for Cross-domain Identity Management (SCIM) to automatically:
- Create users.
- Block users.
- Re-add users (reactivate SCIM identity).
If you are a GitLab.com user, see configuring SCIM for GitLab.com groups.
- Configure SAML single sign-on.
To configure GitLab SCIM:
- On the left sidebar, at the bottom, select Admin Area.
- Select Settings > General.
- Expand the SCIM Token section and select Generate a SCIM token.
- For configuration of your identity provider, save the:
- Token from the Your SCIM token field.
- URL from the SCIM API endpoint URL field.
Removing or deactivating a user on the identity provider blocks the user on the GitLab instance, while the SCIM identity remains linked to the GitLab user.
To update the user SCIM identity, use the internal GitLab SCIM API.
After a user is removed or deactivated through SCIM, you can reactivate that user by adding them to the SCIM identity provider.
After the identity provider performs a sync based on its configured schedule, the user’s SCIM identity is reactivated and their GitLab instance access is restored.
See our troubleshooting SCIM guide.