Users and groups synced via SCIM provisioning
This article explains how users and groups synced through SCIM provisioning are handled.
*For details on SCIM setup, refer to SCIM Provisioning under External system integration.
Select Manage users from the side menu.
Required
Customization option, management role of Group manager
Users synced via SCIM provisioning
This section explains how users synced via SCIM provisioning are displayed and managed on the Manage users page.
01. Display of SCIM-synced users
If group information syncing is disabled, synced user details will only appear under All users.
However, you can manage these users just like those created directly in learningBOX or via CSV files.
Users synced via SCIM provisioning will display a SCIM provisioning label on relevant fields within the Manage users page.
In this case, updating user details in learningBOX will still cause those details to be overwritten during the next sync if they are updated on the IdP side.
If a user belongs to a SCIM-synced group, they cannot be removed from that group within learningBOX.
Groups synced via SCIM provisioning
This section explains how groups synced via SCIM provisioning are displayed and managed on the Manage users page.
*This feature is available when Group information is ticked under SCIM.
01. Display of SCIM-synced groups
When groups are synced via SCIM provisioning, a SCIM provisioning is added to the group list on the left side of the Manage users page.
Synced groups will be displayed inside this item.
If a user synced via SCIM provisioning does not belong to a SCIM-synced group, they are counted in the number displayed to the right of SCIM provisioning, allowing you to check their user information; however, editing their details must be done from All users.
02. Operations for SCIM-synced groups
The following operations can be performed on SCIM-synced groups from the Manage users page:
・Group permission settings
・Viewing group information
・Content assignment
・Changing group membership
・Resending invitation emails
The following operations cannot be performed on SCIM-synced groups:
・User registration and group creation
・Bulk operations via CSV, except for certain permission settings
・Editing group information
・Archiving groups on the screen
・Deleting groups
・Deleting accounts from the group screen, though this can be done under All Users
・Adding or removing users to and from SCIM-synced groups
・Reordering groups
And other restricted actions.
Renaming or deleting groups created via SCIM provisioning, as well as assigning or removing users to and from SCIM-synced groups, must be done on the IdP side and updated through synchronization.
SCIM linked groups archived by synchronization can be deleted on learningBOX.
03. Copy Group Operations
Certain operations are restricted for copied groups created automatically via SCIM provisioning.
Therefore, when performing operations on a group, please click the group link provided in the warning text.
You can perform various operations after navigating to the target group.
Note
・To assign group membership via CSV for SCIM-synced groups, select All users.
*Permission settings via CSV can only be applied to parent groups.
Filter
You can filter users and groups synced via SCIM provisioning.
*This section explains the Filter option located at the top of the Manage users page.
Instructions
This section explains filtering conditions using group membership and SCIM-synced group membership.
01. Available settings
Filtering is performed using two settings: Group membership and SCIM-synced group membership.
▼ Group membership
You can select whether users belong to any group, including SCIM-synced groups.
*This option appears when All users is selected from the group list on the left.
▼ SCIM-synced group membership
You can select whether users belong to a SCIM-synced group.
*This option appears when All users or SCIM provisioning is selected from the group list on the left.
02. Filtering conditions
Each filtering condition is explained below.
1. All users are displayed regardless of their SCIM provisioning status or group membership.
2. SCIM-synced users are displayed regardless of their membership in SCIM-synced groups.
3. Users who are both SCIM-synced users and members of SCIM-synced groups are displayed.
4. Users who are SCIM-synced users but do not belong to SCIM-synced groups are displayed.
Note
Groups created via SCIM provisioning can also be selected in screens outside of Manage users where group selection is required.
However, restrictions may apply to certain features.