Identity and access

SCIM 2.0 provisioning

Your identity provider pushes people and groups to Janus, and leavers lose access, keys and sessions at once.

What it is

Your identity provider pushes users and groups to Janus over SCIM 2.0. Deprovisioning a person disables them, revokes their API keys and ends their sessions.

Why you want it

Offboarding has to be immediate and complete. SCIM removes the gap between someone leaving in the directory and their AI access actually ending.

Someone leaves the company and is deactivated in the identity provider. The provider sends a SCIM update to Janus, which disables the account, revokes the person's API keys and ends their sessions in one step. IDENTITY PROVIDER Dana Ruiz deactivated · 09:02 SCIM PATCH active: false Janus IN THE SAME SECOND Account disabled, no new sign-ins All of Dana's API keys revoked Open sessions ended, team memberships withdrawn

How it works

  • Base URL /scim/v2 with Users, Groups, ServiceProviderConfig, Schemas and ResourceTypes
  • PATCH and filtering supported (eq, co, sw, and/or/not, value paths); bulk, sort and ETag are not
  • Dedicated bearer credentials with optional expiry, atomic rotation and revocation
  • SCIM groups can be mapped to teams; deactivation withdraws team membership sources

In the product

Janus SCIM setup screen with demo data
SCIM setup

The SCIM endpoint and the steps to connect your identity provider.

Actual Janus interface · Demo identities and synthetic usage

Related features

Single sign-on with OIDC

Sign in with Okta, Entra ID, Authentik, Keycloak or AD FS, with accounts and groups kept in step with your directory.

Details →

Teams with their own grants and quotas

Departments get their own grants, budgets and usage, and every request keeps the team it was charged to.

Details →

Administrator groups and roles

Administrator rights can follow a directory group, so removing someone from the group removes their admin access.

Details →

See it on your own network.

The Community edition is free for up to 25 people. The 30-day Business trial unlocks every Business feature.

Download free Start a Business trial