Use SCIM to automatically provision, update, and deprovision Webflow accounts through your IdP.
SCIM (System for Cross-domain Identity Management) lets your IT team manage Webflow access from a single source of truth — your identity provider (IdP). Automatically provision and deprovision Workspace membership, ensuring secure, centralized control over who gets access. Newly provisioned users will have instant access to Webflow the first time they log in, since their account is already created.
Important
SSO must be enabled for your Enterprise Workspace before you can configure SCIM provisioning.
How SCIM works
Once SSO is enabled and SCIM is configured, all user management for Webflow happens through your IdP — not in Webflow.
- Provision user accounts — creates new Webflow users based on IdP assignments
- Deprovision user accounts — removes Workspace access when a user is unassigned
- Centralized updates — sync changes to user details (first name, last name, email) from your IdP to Webflow
Note
Webflow doesn’t currently support assigning roles or groups via your IdP.
Provisioning with SCIM
SCIM provisioning creates user accounts in Webflow before they log in. All new users must be created in your IdP — Webflow becomes a read-only destination for user management. As a result, user management actions (like adding or removing users) can no longer be performed within Webflow’s admin dashboard but must take place in your IdP. This gives IT full control and ensures consistency across systems.
Updating User Accounts with SCIM
You can update a user’s first name, last name, and email directly from your IdP. These changes automatically sync to Webflow. This gives IT full control over user identity data and reduces friction when managing organizational changes, like name updates.
Deprovisioning with SCIM
When a user changes roles or leaves your company, deprovisioning in your IdP automatically removes their access to your Webflow Workspace.
- Team Workspace access is removed — the user sees an error if they try to log in
- Their seat becomes available — they’re removed from the Workspace members list
This process helps protect sensitive content and simplifies seat management for IT teams.
Note
The user retains access to any personal Workspaces they own or were separately invited to.
Set up SCIM provisioning
Webflow’s Enterprise Support or Customer Success teams provide custom setup instructions for SSO and SCIM. If you haven’t received instructions or need to update your provisioning configuration, contact your Customer Success Manager or Enterprise Support.