SCIM Provisioning
The System for Cross-domain Identity Management (SCIM) User Provisioning APIs enable user provisioning for ICE MT supported products (e.g. Encompass, DDA). In addition, SCIM APIs also support assignment of users and organizations to Encompass user groups for purposes of provisioning access to loans and shared Encompass resources (such as Templates and other items configurable on the User Group level).
SCIM is an open standard, REST and JSON based protocol that simplifies the user identity lifecycle management process by enabling automation between cloud-based identity providers (e.g., Okta) and service providers (e.g., Encompass). With SCIM, user identities are created and managed in a single user directory (identity and HR systems) and the user provisioning and deprovisioning changes are communicated across different applications such as Encompass.
The Encompass SCIM APIs are compliant with version 2.0 of the SCIM specification, which supports standard CRUD (Create, Retrieve, Update, Delete) operations.
Supported Use Cases
- Create a SCIM User profile
- Retrieve a SCIM User(s) profile
- Update a SCIM User profile
- Delete (disable) a SCIM User
- Retrieve Encompass User Groups
- Assign & Remove Users from Encompass User Groups
SCIM User Provisioning User Guide
Please refer to the SCIM User Provisioning guide for additional details on the usage of the SCIM APIs.
SCIM Account Links
The SCIM Account Links APIs facilitate cross-domain account linking, enabling single-sign-on across the supported ICE Mortgage Technology products.
Supported Use Cases
- Retrieve all accounts tied to a given SCIM globalUserId.
- Generate a globalUserId for an existing Encompass/DDA application user.
- Link a globalUserId to an IMT user account.
- Resolve multiple globalUserId conflicts for the same user account in case a duplicate globalUserId was generated in error.