Skip to main content
SCIM (System for Cross-domain Identity Management) lets you automatically sync your team directory with Tella. When you add or remove someone in your identity provider, Tella updates accordingly.
SCIM is a paid add-on for Pro and Premium plans: $125 per month on top of your subscription, covering one directory connection. On Enterprise plans SCIM is included — no add-on charge. Workspace owners can enable it self-service under Settings → Security. Enterprise customers looking to purchase multiple licenses can reach out to sales@tella.com.

​
What SCIM does

With SCIM enabled, your identity provider becomes the source of truth for your Tella workspace membership:
  • Provision users — when you assign someone to Tella in your identity provider, they’re automatically added to your workspace.
  • Deprovision users — when you remove someone, their Tella workspace access is revoked.
  • Keep attributes in sync — changes to user details (like name or email) in your identity provider are reflected in Tella.

​
Supported providers

SCIM provisioning works with any SCIM 2.0-compatible directory, including:
  • Okta
  • Azure Active Directory (Entra ID)
  • Google Workspace
  • OneLogin
  • JumpCloud
  • PingFederate

​
Getting started

  1. Enable the add-on — as a workspace owner, go to Settings → Security, select Directory sync (SCIM), and click Enable SCIM. The $125/month add-on is added to your existing workspace subscription, prorated for the current billing period (on Enterprise plans there’s no charge — SCIM is included). SCIM is typically set up alongside SSO.
  2. Connect your directory — once the add-on is active, click Connect your directory to open the guided setup. Pick your identity provider and follow the steps; you’ll get the SCIM endpoint URL and API token to enter in your provider’s directory sync settings, and you’ll be returned to Tella when you’re done.
  3. Assign users — assign users or groups to the Tella application in your identity provider. They’ll be provisioned automatically.
Need help, or on a custom enterprise agreement? Contact us and we’ll set SCIM up with you.

​
FAQ

​
Do I need SSO to use SCIM?

SCIM can be used independently, but most teams enable both SSO and SCIM together for a seamless experience. While SSO handles sign-in and can add users when they first authenticate, SCIM goes further — it automatically revokes access when someone is removed from your identity provider, and keeps profile details in sync.

​
What happens when a user is deprovisioned?

Their access to the workspace is revoked. Their videos remain in the workspace and are still accessible to other members with appropriate permissions.

​
Can I provision users in groups?

Yes. If your identity provider supports group-based assignment, you can assign entire groups to Tella and all members of that group will be provisioned.

​
How do I turn SCIM off?

Workspace owners can disable SCIM under Settings → Security. This deletes the directory connection, stops provisioning immediately, and removes the add-on from your subscription. Existing members keep their access.

​
Where can I find Tella’s security documentation?

Visit our Trust Center for details on security practices, compliance, and data protection.