SCIM provisioning

Organizations can now use SCIM 2.0 to let identity providers such as Okta provision, update, and deprovision Tuist members automatically. Generate a SCIM bearer token from the Authentication settings page, configure your IdP with the SCIM endpoint URL, and assign users or groups from your IdP to keep Tuist membership in sync.

SCIM provisioning works alongside SSO: SCIM manages membership lifecycle, while SSO controls sign-in. Deprovisioned members are removed from the organization, preserving their user record and historical work without disabling access to other Tuist organizations.