Inspect SCIM users and groups with the new population viewer in Cloudflare One
Hi everyone, it's Shii-chan! Here's a handy Cloudflare One update for anyone using SCIM.
Cloudflare Changelog
developers.cloudflare.com
What was announced?
The Cloudflare Changelog announced the SCIM population viewer. It shows the users and groups provisioned to Cloudflare One by each identity provider.
The story so far
To check what Cloudflare had actually received, you had to make API requests or open a support ticket.
What changes
You can now confirm from the dashboard whether the users your IdP should have sent really arrived, which makes troubleshooting SCIM much easier.
Dive Deep
In Zero Trust > Integrations > Identity providers, select a user or group count under SCIM resources to open the viewer.
Here is what you can do.
- Search users by username, email, name, or resource ID, and groups by name or resource ID
- Inspect resource attributes in formatted or JSON views
- View group members and compare Cloudflare and IdP resource IDs with provisioning logs
- Delete individual resources from the Cloudflare SCIM population when you have edit permission
Note that the viewer shows provisioned resources, not provisioning event history. Use SCIM provisioning logs to investigate failed requests. Existing SCIM deprovisioning and policy behavior remain unchanged.
Wrap-up
- View provisioned users and groups per identity provider
- Search, view attributes, compare IDs, and delete individual resources
- Keep using provisioning logs for event history
This one is for admins who run and debug SCIM integrations!
