Manage Guru users and groups with automatic provisioning

Roles: Admin
Plans: Team, Corporate, Enterprise


Guru supports automatic user and group provisioning with the SCIM (System for Cross-domain Identity Management) standard. Automatic provisioning is available to Guru teams on the Pro, Team, Corporate, or Enterprise plans. To setup automatic provisioning, your team will need to first have Single Sign On setup (SSO).

What does automatic provisioning do and why is it useful?

With automatic provisioning enabled, Guru Admins no longer need to manually create users or maintain user groups inside of Guru. All team maintenance, including adding, removing, and assigning users to groups will occur inside the identity provider, not in Guru. This makes it much easier for large teams to manage their users and groups in one place.

Setting up Automatic Provisioning

Admins can setup automatic provisioning inside their team's Single Sign-On settings on the Integrations page in Guru.
Once Single Sign-On is configured, the SCIM setup can be toggled ON, with the option to sync only users or users and groups.
Screen Shot 2018-11-13 at 11.44.26 AM.png

The provisioning setup varies depending on the identity provider (IDP) your team uses. For detailed instructions on how to setup automatic provisioning for your specific IDP, please reach out to Guru at support@getguru.com. Guru is featured as a member of the Okta network, but this functionality works for any IDP that supports the SCIM 2.0 standard. Here is a list of IDPs we've worked with in the past (however we are not limited to this list):

  • ADFS

  • Okta

  • OneLogin

  • PingOne

  • Centrify

  • JumpCloud

NOTE: Guru currently does not support automatic provisioning through Office 365. We only support SSO through Google and standard SAML using a third party identity provider.

What to expect after Automatic Provisioning is enabled

Automatic provisioning allows Admins to manage Guru team members more efficiently. Upon enabling auto provisioning:

  • Any users or groups that pre-existed in Guru that DO NOT match users or groups in your IDP will remain in Guru and are editable/removable

  • Users, groups, and group assignments from your IDP will come in to Guru immediately

    • Any users, groups, and group assignments with pre-existing exact matches in Guru will be merged, and once merged these become uneditable in Guru

  • Admins will be able to distinguish users/groups from your identity provider from Guru users/groups via this Screen Shot 2018-11-13 at 11.35.17 AM.pngsyncing symbol

  • Any Cards that are unassigned due to removal of a user or group can be re-assigned in the Card Manager

  • When users are removed from SSO they will be immediately deleted in Guru

    • Reassign user responsibilities such as Card verification BEFORE removing them from SSO

  • With automatic provisioning enabled Admins will NOT be able to:

    • Create users or groups from within Guru

    • Add users to synced groups from within Guru

NOTE: Members added through automatic provisioning are billable as soon as they sign in for the first time. The cost of new member accounts will be prorated for the remainder of your current billing period.