Skip to main content
Available on the Enterprise plan. Contact sales to learn more.
When enabled, only users provisioned via SCIM can access the organization. Users attempting to sign in via SSO without a SCIM-provisioned account are blocked. Useful when:
  • Centralizing account lifecycle management in your identity provider
  • Ensuring every user in the organization has a corresponding directory entry
  • Preventing access from users outside your provisioned scope, even if they can authenticate via SSO

ā€‹
Prerequisites

The toggle is disabled until SCIM provisioning is configured and enabled.

ā€‹
Configuration

  1. Go to Settings ā†’ Organization ā†’ Policies
  2. Toggle Restrict Account Creation to SCIM
Changes take effect immediately for new sign-in attempts. Existing members are not removed.

ā€‹
Effect on users

Before enabling, confirm that all users who need access are in scope of your SCIM provisioning. Users outside the provisioning scope will lose the ability to sign in to a new account, even with valid SSO credentials.