SCIM Account Provisioning

With System for Cross-domain Identity Management (SCIM), administrators can automate the exchange of user identity information between systems.

If you use SAML SSO in your organization, you can implement SCIM to add, manage, and remove organization members access to Gamesight. For example, an administrator can deprovision an organization member using SCIM and Gamesight will automatically remove the member's access.

FeaturesSAMLSAML + SCIM
User Authentication (SSO)XX
"Just In Time" Account ProvisioningXX
"Push" Account Provisioning & DeprovisoningX
User Authorization Management (Set Roles via IdP)X

These identity providers have been verified compatible with Gamesight's SCIM API:

Read their integration guides for more information on how to get setup with SCIM.

Role Management

Gamesight supports sending a user's roles through both the SCIM & SAML protocols in a string encoded format. The IdP guide will have more details about how to configure your IdP to pass this role data to Gamesight. This guide covers the general structure and format of the role data Gamesight accepts.

For example, an admin user's roles may end up looking something like the following

{
  ...
  "roles": [
  	"org:1:member",
    
    "game:11:admin",
    "team:111:admin",

    "game:12:member",
    "team:121:member",
    "team:122:admin",
  ]
}

The format for each Role asserted is {context_type}:{context_id}:{role}. You can find a summarization of the available contexts and roles below.

ContextValid Roles
orgadmin, member
gameadmin, billing, integration, analyst, member
teamadmin, member

You can find your Org, Game, and Team IDs through the "Management" tab on the Gamesight console.