To automate the creation and update of user accounts in illuxiLMS, you can use the SCIM (System for Cross-domain Identity Management) standard. illuxiLMS supports SCIM integration, particularly with Azure AD, to synchronize users and groups:
What SCIM Does: SCIM allows Azure AD to push user data to illuxiLMS. For example, when a new employee joins and is added to Azure AD, they can be automatically created in illuxiLMS with the appropriate details. Likewise, if a user is deactivated or removed in Azure, SCIM can signal illuxiLMS to deactivate that account. Group memberships can also be synced (for example, an Azure AD group corresponding to a particular learner cohort in illuxiLMS).
Setup in Azure AD: In Azure AD, after setting up the SSO Enterprise app for illuxiLMS, you can configure Provisioning:
Provide the SCIM endpoint URL and an API key from illuxiLMS. (illuxiLMS will supply a SCIM URL and require generating a token/API key for Azure to use.)
Define which attributes to synchronize (usually name, email, etc. are pre-mapped).
Choose whether to sync groups and which ones. Often you might scope it to certain Azure AD groups representing trainees.
Turn on the provisioning job.
Enable SCIM in illuxiLMS: In the illuxiLMS admin settings, enable SCIM provisioning. Generate a SCIM API token/secret for Azure AD to use (this is often under Integration > SCIM or similar).
Testing: Add a test user in the synced Azure AD group and watch it appear in illuxiLMS within a few minutes. Similarly, try updating a user’s name or disabling a user in Azure to see if illuxiLMS reflects the change.
Production vs Staging: Just as with SSO, do the SCIM setup for both staging and production environments if you have both. Use separate tokens and endpoints as provided for each environment.
Important Notes: SCIM will overwrite certain data when syncing, so be mindful: if you manually change a user’s name in illuxiLMS but Azure has a different name, the next sync might revert it. It’s best to treat Azure AD as the source of truth for user info when SCIM is enabled. Also, typically SCIM will not remove users entirely in illuxiLMS but mark them as inactive (to preserve training records) if they are deleted in Azure.
Using SCIM ensures your LMS user base is always up-to-date with your company directory, saving admin time and preventing inconsistencies.