diff --git a/references/workspace/scim-integration.mdx b/references/workspace/scim-integration.mdx index 77a92e3e..9451c757 100644 --- a/references/workspace/scim-integration.mdx +++ b/references/workspace/scim-integration.mdx @@ -20,8 +20,14 @@ SCIM (System for Cross-domain Identity Management) is an open standard protocol This document describes the steps required to integrate SCIM into your Enterprise instance, allowing your IdP to manage users and groups within your organization. +If you are self-hosting Lightdash, you must set the `SCIM_ENABLED` environment variable to `true` to enable SCIM: + +```bash +SCIM_ENABLED=true +``` + - **Important:** If you are self-hosting Lightdash, when using SCIM with SSO, you should enable the `AUTH_ENABLE_OIDC_TO_EMAIL_LINKING` environment variable. This allows linking OIDC identity to an existing user by email. Without this setting, Lightdash will attempt to create a new user when they sign in via SSO, which will fail if the user was already provisioned via SCIM. + **Important:** When using SCIM with SSO, you should also enable the `AUTH_ENABLE_OIDC_TO_EMAIL_LINKING` environment variable. This allows linking OIDC identity to an existing user by email. Without this setting, Lightdash will attempt to create a new user when they sign in via SSO, which will fail if the user was already provisioned via SCIM. ```bash AUTH_ENABLE_OIDC_TO_EMAIL_LINKING=true