SCIM
System for Cross-domain Identity Management — an open standard for automating user provisioning and deprovisioning between identity providers and SaaS apps.
What is SCIM?
SCIM 2.0 is the modern protocol for syncing user accounts between an identity provider (like Okta, Google Workspace, or Microsoft Entra) and a SaaS application. When you fire someone in your IdP, SCIM is what tells every connected SaaS app to revoke their access immediately.
Why it matters
Without SCIM, deprovisioning is manual — and that's how former employees retain access to live customer data for weeks. With SCIM, the moment a user is disabled in the IdP, they're disabled everywhere.
Cubbie supports SCIM 2.0 inbound (other IdPs provisioning into Cubbie) and uses SCIM outbound when cancelling subscriptions to revoke vendor seats.