> ## Documentation Index
> Fetch the complete documentation index at: https://www.tella.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# SCIM provisioning

SCIM (System for Cross-domain Identity Management) lets you automatically sync your team directory with Tella. When you add or remove someone in your identity provider, Tella updates accordingly.

<Info>
  SCIM is a paid add-on for Pro and Premium plans: \$125 per month on top of your subscription, covering one directory connection. On Enterprise plans SCIM is included — no add-on charge. Workspace owners can enable it self-service under **Settings → Security**. Enterprise customers looking to purchase multiple licenses can reach out to [sales@tella.com](mailto:sales@tella.com).
</Info>

## What SCIM does

With SCIM enabled, your identity provider becomes the source of truth for your Tella workspace membership:

* **Provision users** — when you assign someone to Tella in your identity provider, they're automatically added to your workspace.
* **Deprovision users** — when you remove someone, their Tella workspace access is revoked.
* **Keep attributes in sync** — changes to user details (like name or email) in your identity provider are reflected in Tella.

## Supported providers

SCIM provisioning works with any SCIM 2.0-compatible directory, including:

* **Okta**
* **Azure Active Directory (Entra ID)**
* **Google Workspace**
* **OneLogin**
* **JumpCloud**
* **PingFederate**

## Getting started

1. **Enable the add-on** — as a workspace owner, go to **Settings → Security**, select **Directory sync (SCIM)**, and click **Enable SCIM**. The \$125/month add-on is added to your existing workspace subscription, prorated for the current billing period (on Enterprise plans there's no charge — SCIM is included). SCIM is typically set up alongside [SSO](/help/admin/set-up-sso).

2. **Connect your directory** — once the add-on is active, click **Connect your directory** to open the guided setup. Pick your identity provider and follow the steps; you'll get the SCIM endpoint URL and API token to enter in your provider's directory sync settings, and you'll be returned to Tella when you're done.

3. **Assign users** — assign users or groups to the Tella application in your identity provider. They'll be provisioned automatically.

<Note>
  Need help, or on a custom enterprise agreement? [Contact us](mailto:sales@tella.com) and we'll set SCIM up with you.
</Note>

## FAQ

### Do I need SSO to use SCIM?

SCIM can be used independently, but most teams enable both SSO and SCIM together for a seamless experience. While SSO handles sign-in and can add users when they first authenticate, SCIM goes further — it automatically revokes access when someone is removed from your identity provider, and keeps profile details in sync.

### What happens when a user is deprovisioned?

Their access to the workspace is revoked. Their videos remain in the workspace and are still accessible to other members with appropriate permissions.

### Can I provision users in groups?

Yes. If your identity provider supports group-based assignment, you can assign entire groups to Tella and all members of that group will be provisioned.

### How do I turn SCIM off?

Workspace owners can disable SCIM under **Settings → Security**. This deletes the directory connection, stops provisioning immediately, and removes the add-on from your subscription. Existing members keep their access.

### Where can I find Tella's security documentation?

Visit our [Trust Center](https://trust.tella.com) for details on security practices, compliance, and data protection.