SCIM is available for customers on the Enterprise plan.

​
What is SCIM?

The System for Cross-domain Identity Management (SCIM) is an open standard for managing user identity information. Its primary purpose is to simplify user provisioning by enabling centralized control and automation of user account lifecycles, from creating to updating to reading and deleting user identities.

​
SCIM and Next Matter

When you use SCIM provisioning with Next Matter, user data is regularly synced from your identity provider to Next Matter. You can connect to all major identity providers (such as Okta, Microsoft Entra, or OneLogin) and major HR systems (such as BambooHR, Workday, or Rippling).
Image showing data centralization with SCIM
With SCIM provisioning, users will be listed in the Next Matter app (in Company > Colleagues) with a label showing that they’ve been provisioned through SCIM. You can provision the following user data:
  • Email address (Next Matter username)
  • First name
  • Last name
  • role within the organization
You can also provision this team data:
  • team name
  • team membership
Once provisioned, you can’t change this data in the Next Matter app. Additionally, if a SCIM-managed user leaves a company, you can only deactivate this user in SCIM. You can still add and manage users and teams manually if you need to. These users and teams will get the Next Matter label indicating that they’re managed in the Next Matter app.

​
Roles and teams

By default, SCIM-provisioned users will be assigned the Next Matter light user role during sync, unless configured otherwise. You can always update the role directly in SCIM.
  • Light user - this role has access to the inbox, portals, and the workflows shared through portals. Light users can also view the status of their requests and monitor their progress.
SCIM used in Next Matter
We map SCIM groups onto Next Matter teams. If an appropriate team doesn’t exist in Next Matter, we create it and mark it as SCIM-managed. You can only add or remove users from that team through SCIM.
SCIM used in Next Matter

​
SCIM setup

  1. Contact the Next Matter support team and give them the email address of the SCIM directory admin. We’ll send the SCIM configuration link to this person.
  2. Click the link and follow the configuration wizard to add SCIM to your identity provider and map your user data to Next Matter.
  3. Let Next Matter support know you’re done and we’ll finish the sync for you.

​
Provisioning and authentication

Provisioning and authentication are independent. A user can be provisioned from one Entra ID tenant or Okta directory and authenticate against another. If you choose this setup, ensure that the same user (with the same email address) exists in both tenants. Otherwise, the user will be provisioned but unable to sign in via SSO.