Udemy Business supports user and group access and identity management with the System for Cross-domain Identity Management (SCIM) standard. SCIM is used by Single Sign-On (SSO) services and Identity Providers to manage people across a variety of apps and tools, including Udemy Business.
SCIM can be a great option for organizations looking to maximize scale, security, and minimize friction in user management for Udemy Business.
What you can do with SCIM:
- Automatically provision licenses and access to users and groups from your Identity Provider (provisioning).
- Automatically deactivate users and groups from your identity provider (deprovisioning).
- Reactivate users who were previously deprovisioned (provided the user’s personal identifiable information has not been anonymized).
- Update user details: name, email address.
- Create, remove or edit groups.
- Manage group membership (users changing groups).
What you cannot do with SCIM:
- Delete User Personal Identifiable Information (PII) via SCIM on any Identity Provider.
- Sync data from Udemy Business back to the Identity Provider.
- Manage roles (admin, group admin, user).
- Assign Udemy Business Pro licenses
Once you take any of the above supported actions, the data or change will automatically update in Udemy Business.
Key points about SCIM Integration for your Udemy Business Account
- Your SCIM integration setup will vary depending on the identity provider you use.
- Udemy Business supports SCIM Provisioning for the key identity providers and SSO services that offer access and identity management.
- SCIM Provisioning is available to Enterprise Plan customers using Single Sign-on (SSO).
- Users provisioned through SCIM in your SSO service will not take up a license until they join Udemy Business by signing in for the first time. When users are provisioned through SCIM, but have not signed in for the first time, they will display in the All users page with a No License status.
- For customers who have purchased Udemy Business Pro licenses for all users, Pro licenses will be automatically assigned when invitations are accepted by users, or when they authenticate via SSO/SCIM.
How to enable SCIM provisioning
To enable SCIM provisioning for your Udemy Business account, go to your Udemy Business account to Manage > Settings > Provisioning (SCIM).
Scroll to the SCIM Integration section. Next, follow the instructions to enable SCIM, choose your Identity Provider from the dropdown and generate the credentials (Username and Password or Secret/Bearer token), which you then need to input into your Identity Provider as part of the configuration.
Depending on which Identity Provider you use, follow the instructions in the appropriate guide below to complete the SCIM set up.
For other IdPs, or your own tools, please refer to the Udemy SCIM API Configuration Guide.
How to disable SCIM provisioning
To disable SCIM provisioning for your Udemy Business account (if you’re changing providers or no longer require SCIM) access Manage > Settings > Provisioning (SCIM).
Scroll to the SCIM Integration section and click on the Disable Integration link and follow the instructions to disable SCIM. This will disable the integration from the Udemy Business side, but your IT team will need to disable the integration from the Identity Provider side also.
You can continue to use Udemy Business as usual, but you will need to manually update user and group information within the platform from now on.
Deprovisioning users with SCIM
Note that Udemy Business users deprovisioned from your Identity Provider will be deactivated within Udemy Business. We first deploy this “soft delete” to enable you to preserve learner history, in the case of reactivating these users at a later point, and to prevent accidental, irreversible, anonymization of user’s data. If you wish to permanently delete a user and all their data, please follow the instructions below:
Deleting PII for SCIM managed learners
If you wish to disconnect a learner from being managed by your IdP with SCIM, you can do so by first deprovisioning them in your SSO Active Directory, and then you can delete their PII in your Udemy Business account. To learn how to anonymize a learner, click here.
If you need to manage a learner directly from within your Udemy Business account and not via your SSO IdP, and further, you do not wish to delete their PII, please reach out to our support team for further assistance.