User provisioning is the process of automatically synchronizing user information between Nulab Apps and an Identity Provider (IdP). The IdP stores and manages user authentication data, such as usernames, and permissions. User provisioning detects any additions, changes, or deletions made in the IdP and automatically reflects these updates in the user information within Nulab Apps.
User provisioning in Nulab Apps
To enable or disable user provisioning from your Nulab Apps profile, click your profile icon, then navigate to Organization Settings > Access Management > User Provisioning.
Please note that the settings for SAML authentication must also be enabled in order to use user provisioning.
Click the Manage button, then check Enable to generate a SCIM token and URL.
Review organization members
On the User provisioning tab, click the Review existing accounts link to review which organization members have an active account, and which type of account (Managed or Provision Managed) they have.
The administrator cannot delete or change the role of the token-issuing member until a different token issuer has been assigned. Only members with admin roles can be set as token issuers.
Edit member account information
Administrators can edit account data for active and inactive provisioned accounts. However, any changes will be overwritten by the IdP after the next synchronization.
Only the following account fields will be synchronized:
- Name
- Language
- Unique ID
- Role
- Active/Inactive
Managing active vs. inactive accounts
With user provisioning, accounts can be deactivated or reactivated at any time through the IdP. Deactivated accounts cannot log in or use Nulab services.
Click the Members tab in your Organization Settings to see whether an account is active or inactive.
Please note that inactive accounts do not count toward the number of licenses purchased for a specific product. (Cacoo, Pass).
Supported IdPs
If an Identity Provider (IdP) supports SCIM 2.0, you can use user provisioning. The following IdPs are tested and confirmed:
- Microsoft Entra ID
- Okta
- OneLogin
- CloudGate UNO