SCIM with JumpCloud
Generate an API token in Willow
Follow the steps in Generate a SCIM API token and name it "JumpCloud SCIM Integration".
Create a placeholder test user
JumpCloud requires a Test User Email to validate the SCIM connection during activation. This email must not already exist in Willow. Use a placeholder like jumpcloud-test@your-domain.com.
Configure SCIM in JumpCloud
- In the JumpCloud Admin Portal, open the Willow OIDC app you created for SSO
- Open the Provisioning tab (labeled Identity Management before JumpCloud's April 2026 rename)
- Fill in:
- Base URL:
https://app.withwillow.ai/scim/v2(SaaS) or{your-app-url}/scim/v2(On-Premise) - Token Key: paste your API token
- Test User Email: the placeholder email from above
- Base URL:
- Enable Enable management of User Groups and Group Membership in this application if you want to push groups
- Select Activate
JumpCloud runs a connection test followed by provisioning tests. If successful, the message "Provisioning integration has been successfully verified" is shown. If it fails, the error is shown above the Activate button.
Assign users and push groups
- Open the User Groups tab on the Willow app in JumpCloud
- Assign the groups that should have access to Willow
- Assigned users are automatically provisioned; group sync happens via the Provisioning configuration
JumpCloud attribute mapping
The default JumpCloud attribute mappings are compatible with Willow out of the box:
| JumpCloud attribute | SCIM attribute sent to Willow |
|---|---|
email | userName |
firstname | name.givenName |
lastname | name.familyName |
email | emails[0].value |
displayname | displayName |