How does the SCIM integration work?

The BlueTally SCIM integration automatically creates Employee entries in BlueTally so that you'll be able to assign items to them in the app, without the need for manually adding, updating, or removing employees.

We have dedicated setup guides with screenshots and detailed steps for the most popular platforms:

BlueTally adheres to the SCIM 2.0 standard, which means we support all SCIM 2.0-compliant identity providers, including those we don't have a dedicated setup guide for, as long as they have a complete SCIM 2.0 implementation. In that case, you can still refer to one of the setup guides above to get a general understanding of the steps required to set this up.

By default, our SCIM integration will only fetch the employee's name, email address, and job title. In order to also fetch the employee's department, location, and manager data, you'll need to enable the three respective toggles under the SCIM 2.0 section in your account's integrations page.

Once you've followed the steps in the relevant setup guide, you'll start to see your employee list populated in BlueTally. Please note that the first sync can take some time.

What if I have already entered my Employees manually before enabling SCIM? Will the integration recognize them and update their information accordingly?

Yes! If an employee with the same email address already exists in BlueTally, the SCIM integration will automatically recognize and claim them. Their details (name, title, location, department, etc.) will be updated based on your identity provider, and all existing data such as checked-out items will be preserved.

I've enabled the Manager sync as per the setup guide, but the Manager field in BlueTally isn't being populated. What could have happened?

Please make sure that you've selected all your company employees to be part of the SCIM sync, as the SCIM protocol needs the manager of an employee to also exist in BlueTally for the mapping to be made. The manager mapping happens after the first provisioning round has completed, as it needs BlueTally employee system IDs to refer to when setting the manager of an employee. For example, if Employee A's manager is Employee B, you need to make sure Employee B is part of the SCIM sync and has been synced over to BlueTally for them to be set as the manager of Employee A in BlueTally.

What happens if I make a change to an employee entry in BlueTally - will that change be synced to my Identity Provider?

No, our SCIM integration is strictly one-way from your Identity Provider to BlueTally, which means that you'll never risk any changes being made in your Identity Provider based on your BlueTally account.

What happens if I make a change to an employee entry in BlueTally that has been added by the SCIM integration?

Any changes you make to the employee in BlueTally will be overwritten by the SCIM integration in the next sync based on the employee details in your identity provider. For example, if you change the Job Title in BlueTally, this will be overwritten in the next SCIM sync based on the Job Title of that employee in your Identity Provider.

Which fields can I have synced from my Identity Provider to BlueTally with the SCIM integration?

As of now, we're only able to fetch the fields below from your identity provider; however, a custom field mapping feature is on the roadmap that will let you map any detail about the employee from your Identity Provider to a custom field in BlueTally.

What happens if I delete or deactivate an employee in my Identity Provider?

If you delete or deactivate an employee in your Identity Provider, they will not be deleted from BlueTally, but marked as Archived instead. That way, you'll be able to keep their history in your inventory even after they have left the company. If you re-activate the employee in your Identity Provider, they will become unarchived in BlueTally as well.

Is it possible to check out items to archived employees?

Archived employees aren't included in the Employee dropdown lists by default and thus can't have items checked out to them, but you can enable this by going to Settings -> Company Details -> Include Archived Employees in Dropdown List.

What happens when an employee is archived?

The employee will get an "Archived" badge next to their name in BlueTally, along with a timestamp showing when they were archived. Any items that are checked out to the employee will automatically become due back in 1 day by default (this can be changed under Settings -> Company Details -> When an employee is archived, set their checked out items due back in).

My employee data isn't syncing correctly, or some employees or employee details are missing. How can I fix this?

Here are a few things to check:

First, please note that it can take up to an hour for changes to sync over, depending on your identity provider.

If the data still hasn't come through, make sure that you've enabled the respective toggles (Location, Department, Manager) under the SCIM 2.0 section in your BlueTally account Integrations page, and verify that your field mapping in your identity provider is configured correctly according to our setup guides.

If everything looks good, try clicking the Restart Provisioning option in your SCIM application to force a re-sync. This will usually bring the data over to BlueTally.

If that still doesn't do the trick, you can safely delete the SCIM application in your identity provider and recreate it from scratch following our setup guides. Don't worry - this will simply re-sync all of your employee data, and won't affect any existing data in BlueTally such as checked-out items.

Can I have multiple SCIM endpoints syncing to my account?

Yes, that is possible - you just need to use your existing SCIM 2.0 token in the different identity providers, and they will all sync into the same BlueTally account. Please make sure that the different identity providers don't have the same email addresses in their directories, as this will cause sync conflicts when two identity providers try to sync the same email address to our system.

When I check my provisioning logs, I see errors with Error Codes like "SystemForCrossDomainIdentityManagementServiceIncompatible" or "EntrySynchronizationError". How can this be fixed?

Some SCIM 2.0 integrations, like Azure AD/Entra, try to perform actions that aren't needed and are not supported by our server, so unfortunately, these actions will appear as errors in your logs. However, these types of errors are normal and tend not to affect the data pulled to BlueTally. As long as none of your employee data is missing in BlueTally, you can ignore these error messages.

​
​If I'm using the same platform for both SCIM and SSO (e.g., Entra, OneLogin, Okta), can I set up both integrations using the same app?

While you can integrate both SCIM and SSO using the same identity provider, you will be required to create a separate app for each integration. You will need one app for your SCIM and another for your SSO.