Simple definition
SCIM provisioning automates creating, updating, and disabling user identities across connected applications.
Purpose and use
SCIM, System for Cross-domain Identity Management, automates identity-object exchange, including users and groups, between directories and applications.
How does it work?
A provisioning service calls supported resources to create, update or deactivate accounts according to assignments and mappings.
Example and verification
Test a complete pilot-account lifecycle: creation, attribute change and access removal, checking logs in both systems.
Points to watch
SCIM is not the SSO sign-in protocol. Logical deactivation or assignment removal can have application-specific consequences.
In short
Provisioning manages object lifecycle; authentication and effective authorization need separate verification.