Smash Security Threats Like Pro!
Transmit Security is serving up unbeatable protection – and custom pickleball paddles at RSA 2025. Book a meeting to grab yours and take your security game to the next level!
Transmit Security is serving up unbeatable protection – and custom pickleball paddles at RSA 2025. Book a meeting to grab yours and take your security game to the next level!
Glossary
User provisioning is the process of creating, updating, and deactivating user accounts and their access rights across systems, ideally automated so that access always matches a person’s current role. It is the operational engine behind the identity lifecycle: when someone joins, changes role, or leaves, provisioning makes their access appear, adjust, and disappear.
Done by hand, provisioning is slow and error-prone, and the errors are dangerous. Accounts that linger after someone leaves ("orphaned accounts") are a favorite foothold for attackers, and over-broad access granted for convenience widens the blast radius of any compromise.
Automated provisioning connects an authoritative source (an HR system for workforce, or a sign-up flow and directory for customers) to the downstream applications that need accounts. When a record changes at the source, the change propagates: an account is created with the right permissions, updated when a role changes, and deprovisioned promptly on departure. The SCIM standard is the common protocol for this exchange across applications.
Prompt deprovisioning is the security payoff. Every account that should have been removed but wasn’t is standing risk, and manual processes miss them routinely. Automated provisioning tied to the source of truth closes that gap, keeps access aligned to least privilege, and produces the clean audit trail regulators expect. For customer identity, provisioning is usually self-service (the customer creates and manages their own account), but the same principles of accurate lifecycle and clean removal apply.
What is user provisioning?
The creation, updating, and removal of user accounts and access across systems, ideally automated to match a person’s current role.
What is deprovisioning?
Removing a user’s accounts and access when they leave or no longer need them, which prevents risky orphaned accounts.
What standard supports provisioning?
SCIM, which automates the exchange of user identity data between systems.
Related: User Management · SCIM · IAM · Identity Lifecycle · Principle of Least Privilege
