Assignment Rules for SCIM Directory Integrations

Kandji recently introduced support for defining assignment rules based on data stored with your identity provider (IdP). That initial release provided support for user data—specifically, department, job title, or user group—stored in Google Workspace or Microsoft Azure AD. We now provide similar support for user data integrated via SCIM.

To populate user attributes in Kandji, an admin will need to populate the attributes on the IdP side. So, for example, if “user title” is not an attribute that the admin has already populated in their IdP directory, that attribute won’t be populated on the Kandji side.

Unlike data integrations with Microsoft Azure AD and Google Workspace, SCIM integrations do not need to be reauthenticated in order for this functionality to be available.