Automating user provisioning with SCIM-like flows
Keep Thinkific user accounts in sync with your identity provider without manual CSV imports.
Manually creating and deactivating learner accounts does not scale. Automated provisioning ensures that when someone joins, moves teams, or leaves, their Thinkific access reflects those changes without extra work for course administrators.
What SCIM provides
The System for Cross-domain Identity Management (SCIM) standard defines a REST API for creating, updating, and deactivating user accounts. With full SCIM, the IdP pushes changes to the application in real time.
What WooNinja SSO provides today
WooNinja SSO uses a just-in-time provisioning model. When a user signs in via SAML or OIDC, WooNinja SSO inspects the assertion, creates or updates the Thinkific account, and assigns the appropriate memberships. This approach covers the most common enterprise needs without requiring a separate SCIM server.
How just-in-time provisioning works
- User authenticates at the IdP.
- IdP returns claims or attributes describing the user and group memberships.
- WooNinja SSO checks for an existing Thinkific account by stable identifier or email.
- If no account exists, one is created and enrolled based on attribute mappings.
- If the account exists, profile data and group memberships are refreshed.
Deprovisioning
Because authentication is delegated to the IdP, disabling a user in the IdP immediately prevents future Thinkific logins. For customers who need accounts suspended in Thinkific as well, WooNinja SSO can be configured to check IdP status during login and lock accounts accordingly.
Attribute-driven enrolment
The most powerful part of automated provisioning is mapping IdP groups to Thinkific bundles, collections, or groups. For example:
- Members of
Sales-Trainingare enrolled in the sales onboarding bundle. - Members of
Leadership-2025gain access to the executive course collection. - Removing a user from the IdP group removes the corresponding enrolment.
When to request full SCIM
If your organisation requires account creation before first login, or if you need bidirectional sync with an HR system, full SCIM may be appropriate. Contact WooNinja sales to discuss enterprise provisioning requirements.
For most Thinkific deployments, just-in-time provisioning through WooNinja SSO reduces admin work, improves security, and keeps learner access aligned with the source of truth in the IdP.