Skip to main content
SCIM (System for Cross-domain Identity Management) lets you automatically sync your team directory with Tella. When you add or remove someone in your identity provider, Tella updates accordingly.
SCIM is available as a paid add-on for Pro and Premium plans. Contact us to enable SCIM for your workspace. Enterprise customers looking to purchase multiple licenses can also reach out to sales@tella.com.

​
What SCIM does

With SCIM enabled, your identity provider becomes the source of truth for your Tella workspace membership:
  • Provision users — when you assign someone to Tella in your identity provider, they’re automatically added to your workspace.
  • Deprovision users — when you remove someone, their Tella workspace access is revoked.
  • Keep attributes in sync — changes to user details (like name or email) in your identity provider are reflected in Tella.

​
Supported providers

SCIM provisioning works with any SCIM 2.0-compatible directory, including:
  • Okta
  • Azure Active Directory (Entra ID)
  • Google Workspace
  • OneLogin
  • JumpCloud
  • PingFederate

​
Getting started

  1. Contact us — reach out to sales@tella.com to enable SCIM for your workspace. SCIM is typically set up alongside SSO.
  2. Receive your setup link — we’ll send you a setup link for your workspace.
  3. Configure your identity provider — open the setup link and follow the steps to connect directory sync with your identity provider. The setup flow provides the SCIM endpoint URL and API token you need to enter in your provider’s directory sync settings.
  4. Assign users — assign users or groups to the Tella application in your identity provider. They’ll be provisioned automatically.

​
FAQ

​
Do I need SSO to use SCIM?

SCIM can be used independently, but most teams enable both SSO and SCIM together for a seamless experience. While SSO handles sign-in and can add users when they first authenticate, SCIM goes further — it automatically revokes access when someone is removed from your identity provider, and keeps profile details in sync.

​
What happens when a user is deprovisioned?

Their access to the workspace is revoked. Their videos remain in the workspace and are still accessible to other members with appropriate permissions.

​
Can I provision users in groups?

Yes. If your identity provider supports group-based assignment, you can assign entire groups to Tella and all members of that group will be provisioned.

​
Where can I find Tella’s security documentation?

Visit our Trust Center for details on security practices, compliance, and data protection.