An overview of user provisioning with SCIM

Calendly supports SAML single sign-on (SSO) for user authentication and SCIM for user provisioning.

Once you’ve enabled SSO for your account, you can use SCIM to automatically add users, update user data, deactivate users, and remove users from your Calendly organization. With SCIM enabled, you can manage Calendly users straight from your identity provider and onboard or off-board employees at scale.

SCIM features

Supported features

From your identity provider, you can create the following actions in Calendly:

Non-supported features 

These actions are not yet supported by Calendly:

  • Add a group

  • Remove a group

If your team is interested in group provisioning, please reach out to Support so we can learn more.

Who can enable SCIM

Typically, an IT admin is the best person to set up SCIM. To enable SCIM, you will need to use a Calendly Enterprise account that belongs to an owner or admin. 

How to enable SCIM

Supported identity providers

Calendly supports any enterprise identity provider using the SCIM 2.0 protocol. Identity providers we have tested and documented include:

If your identity provider is not listed, view How to set up SCIM with your identity provider.

Before you provision

Make sure you have available seats 

To provision users, you must have available seats in Calendly.

The number of users you can provision depends on how many seats are available in Calendly.  For example, if you have 20 available seats, you can provision 20 users. 

To view how many seats are available, go to your Admin Management page. If all seats are occupied at the time of provisioning, you'll receive an error message in your identity provider.

seats_occupied.pngadd_more_seats.png

To add seats, go to the Billing page, select Make changes to your plan, and select Add seats . If you pay by invoice and cannot add seats via the web app, reach out to your Customer Success Manager.

After you provision

Accept the Calendly invitation

Once you've provisioned a user through SCIM, the user will receive an invitation to join your Calendly organization. The user must accept the invitation to join. Once they accept, the user will be prompted to sign in through SSO, and they will fill an open seat in your Calendly organization.

 

96f462c6-0887-428a-8983-9f356f073ef2.png

If a user is not receiving their email invitation to join Calendly, reach out to Calendly Support at idpsupport@calendly.com. If the user is a new employee, please mention that in the email. 

Assign templates

Provisioned users will automatically receive the default 15-min, 30-min, and 60-min event types. If you'd like to assign different templates, you can do so once users have joined your account. To bulk apply templates, view How to make bulk changes to users

Connected calendars and integrations

Enabling SCIM will not impact calendar connections or integrations. Members can connect from their Calendar Connections page and Integrations page.

Making changes

Changing a user's name

You can change a user's first and last name from your IdP, which will sync over to Calendly.

Changing a user's email address

You can change a user’s email from your IdP. This will update the user's Calendly login email.

Changing a user's role

You can change a user’s role from Calendly, on the Admin Management page.

Removing users

With a SCIM-enabled account, you can only remove users via your IdP. You cannot remove users via Calendly.

When removing a user, your IdP can issue two calls to Calendly via SCIM: deactivate or delete. Deactivate is the most common action, but this may vary by identity provider.

  1. Deactivate
    • If you deactivate a user, their Calendly account is deactivated and the user loses access to Calendly; they cannot log in, host events, and people cannot schedule with them.
    • You can choose to re-activate a user and their account at a later stage.
  2. Delete
    • If you delete a user, the user is removed from your organization's instance and their account is permanently deleted. Once you delete an account, you cannot retrieve it. 
    • Note: If a user had a Calendly account prior to joining your organization's instance, the user will only be removed for your instance. They will then re-gain access to their original Calendly account as a free, solo user. 

 

Read next:

How to set up SCIM with your identity provider