From 987b3e47458e31daa926e53ec32e2ce42f1eded1 Mon Sep 17 00:00:00 2001 From: shivankar-singh Date: Wed, 9 Sep 2026 15:32:04 +0530 Subject: [PATCH] docs(cloud): document SCIM role assignment options Expand Step 2 of the SCIM provisioning guide to cover both ways of assigning roles: the IdP's standard SCIM role assignment, and the memberRole custom attribute for IdPs where that doesn't work. Co-Authored-By: Claude Opus 5 --- cloud/admin/scim-provisioning.mdx | 23 +++++++++++++++++++++-- 1 file changed, 21 insertions(+), 2 deletions(-) diff --git a/cloud/admin/scim-provisioning.mdx b/cloud/admin/scim-provisioning.mdx index f9335cf..fad633b 100644 --- a/cloud/admin/scim-provisioning.mdx +++ b/cloud/admin/scim-provisioning.mdx @@ -38,9 +38,28 @@ This guide will help you set up automated user provisioning for your account usi - Authorization Token 5. Test the connection to verify the integration -### Step 2: Map Users and Roles +### Step 2: Assign Users and Roles -When assigning users to ProjectDiscovery's platform in your IdP, you'll need to specify their roles: +When assigning users to ProjectDiscovery's platform in your IdP, you'll need to specify their role. There are two ways to do this: + +#### Option 1: Standard SCIM Role Assignment + +Use your IdP's standard role assignment feature to specify the ProjectDiscovery role during user provisioning. + +#### Option 2: Custom Role Attribute + +If the standard SCIM role assignment doesn't work with your IdP, configure a custom attribute with the following values: + +- **Data type**: String (`string`) +- **Variable name**: `memberRole` +- **External name**: `memberRole` +- **External namespace**: `urn:projectdiscovery:params:scim:schemas:extension:custom:2.0:User` +- **Fully qualified path**: `urn:projectdiscovery:params:scim:schemas:extension:custom:2.0:User:memberRole` +- **Value**: the role in uppercase, for example `ADMIN` + +#### Available Roles + +When assigning users to ProjectDiscovery's platform in your IdP, you'll need to specify their role: - `ADMIN` - Full administrative access to the workspace - `MEMBER` - Standard access for team collaboration (default)