Directory Sync (SCIM)

Directory sync automates how users are created, updated, and removed in Plain.

Instead of manually inviting teammates or disabling accounts when someone leaves your company, Plain syncs directly with your identity provider to keep access up to date automatically. You can map roles within your identity provider to roles within Plain for even easier onboarding.

You can configure Directory sync by going to Settings -> SSO -> Directory sync. This will take you to WorkOS where you will complete integration there.

Share the same directory amongst different workspaces

If you use multiple Plain workspaces and would like to configure a single directory where you centralise user provisioning for all your workspaces, get in touch with us and we will work with you to configure it.

Role assignment

If a user is provisioned via SCIM and no role mapping applies, they will:

• Be assigned the None role

• Appear in the Others tab under Settings -> Members -> Other tab

• Not incur additional seat charges

You can manually change their role at any time from within Plain (Settings -> Members) or the WorkOS admin dashboard (Settings -> SSO)

If a user provisioned via SCIM maps to multiple roles in Plain, we will always pick the most permissive one. For instance, if a user maps to Admin and Support, we will assign it the Admin role.