Import Users and Attributes for SCIM Identity Management Integration

Admins can import users from any JumpCloud SCIM identity management integration used for exporting user identities to web-based applications. This provides an efficient, accurate and consistent method for creating new users and populating their attribute data, while reducing overhead, and eliminating potential errors found with manual entry.  

After you configure an Identity Management integration in JumpCloud with your application, you can provision, update, and deprovision users and groups in and import users from that application through your JumpCloud Administrator Portal. Leverage this integration for centralized user lifecycle management and get immediate attribute management of users bound to integrated applications. 

Prerequisites

• An Identity Management integration needs to be enabled prior to importing users. Learn more about Identity Management Connectors and Custom SCIM Identity Management integrations.

Considerations

• New users aren’t bound to any resource upon import.
• Search and sorting the list of users returned from the application are not currently supported.
• Admins are able to track creation events to see when a user was added, from which application the user was imported, and who performed the import in Directory Insights. Learn more about Directory Insights.
• This feature is only for importing new users, not updating existing users.
• All imported users are placed in an Active user state and have a password status of Password Pending. Users will gain access to their assigned JumpCloud resources once the account registration is complete. For users to complete account registration, account passwords need to be set by either the admin or by users. You can see the user state and password status of new accounts in the Admin Portal Users list.
• The results of an import will always be emailed to you once the import completes.
• Deactivating an identity management integration will leave the users and groups as they were within the application and immediately stop syncing. Any in progress updates will stop and result in an error.

Attribute Considerations

The JumpCloud attributes that will be imported if a Service Provider provides them include the following:

• email
• username
• firstname
• lastname
• middlename
• displayname
• addresses: type [= work, home]
• jobTitle
• department
• phoneNumbers: type [= work, home]
• costCenter
• employeeType
• employeeIdentifier
• organization

Importing Users from an Identity Management Integration

1. Log in to the JumpCloud Admin Portal.
2. Go to USER AUTHENTICATION > SSO.
3. Search for the application that you’d like to configure and click to open its details panel. 
4. Click on the Identity Management tab. 
5. If you have not already configured an identity management integration, configure it now. See Identity Management Connectors and Custom SCIM Identity Management integrations for more details.
6. Under Identity Management, click manual import. 
7. Select the users you want to import from the application into JumpCloud. 
8. Click import. If you are importing less than 100 users, your results will display and you can continue onboarding your users. If you have more than 100 users being imported, JumpCloud will send you an email when your import is complete. 
9. You can now connect users to all their JumpCloud resources. Learn how to Authorize Users to an SSO App and grant users access in Connect New Users to Resources.

Deactivating an Identity Management Integration 

1. Log in to the JumpCloud Admin Portal.
2. Go to USER AUTHENTICATION > SSO.
3. Search for the application that you’d like to deactivate and click to open its details panel. 
4. Under the company name and logo on the left hand side, click Deactivate IdM connection under the section Identity Management.
5. Click confirm to deactivate Identity Management for the application.