Loom

1Password SaaS Manager connects to Loom using SCIM. Loom requires SAML2 Single Sign On (SSO) to be enabled before you can create a SCIM token.

Creating a SCIM token

1. Log in to Loom as an administrator.
2. Open your Workspace settings and go to the Security tab.
3. Click on Configure Directory Sync
4. In the WorkOS setup console, proceed to Step 2. Scroll down until you see the Endpoint and Bearer Token.
5. Copy the Endpoint and Bearer Token into SaaS Manager.

SaaS Manager will only read data by default, so it will not interfere if you already have an identity provider in charge of provisioning and deprovisioning.

If you don't have an identity provider managing users, then just select the Provisioning and Deprovisioning checkboxes when you connect from SaaS Manager.

Provisioning and deprovisioning

• You can choose between Creator, Viewer and Admin roles when creating a user.

• Loom lets you control what happens when a user is deactivated. In the Workspace settings, go to the Security tab and scroll down to Member Deprovisioning.

  We recommend leaving the setting on Deactivate but if you choose to Delete, you should indicate this when you connect Loom to SaaS Manager. This means that SaaS Manager can correctly show whether the user was deactivated or deprovisioned.