Available starting Wednesday, June 24th, 2026.
Overview
Practice Admins can enable and manage SCIM (System for Cross-domain Identity Management) provisioning directly from the Login Management page in RXNT. SCIM allows your organization to automatically provision and deprovision user accounts through your identity provider (such as Microsoft Entra, Google, or Okta).
When SCIM is enabled, users created or deactivated in your identity provider are automatically created or deactivated in RXNT. SCIM provisioning follows industry-standard protocols to ensure secure, consistent user lifecycle management across your organization.
Enable SCIM provisioning
You must have the practice administrator role to access this feature.
Log in to the RXNT Product Dashboard. In the top right corner, click on the Utilities menu, then click Settings.
On the Settings page, select SCIM Provisioning from the left navigation.
Click Enable SCIM provisioning for this company.
Once enabled, the page will display your SCIM credentials:
- SCIM Endpoint URL
- Token Endpoint URL
- Client ID
- Client Secret
Copy each of these values and enter them into your identity provider to complete the connection. Use the Copy buttons to make this easier.
The client secret is shown only once immediately after generation. For security reasons, you will not be able to retrieve it again.
After clicking Done or navigating away from the page, the client secret will be permanently masked.
Disable SCIM provisioning
Disabling SCIM pauses automatic provisioning. Existing users are not affected, but new changes in your identity provider will no longer sync to RXNT.
On the SCIM Provisioning page, click the toggle to disable SCIM.
In the confirmation pop-up, type DISABLE in the box and click Disable to proceed.
Regenerate the client secret
Regenerating the client secret will invalidate your current secret. Any identity provider configurations using the old secret will stop working and will need to be updated with the new value. If you need to replace your current client secret, click Regenerate Secret on the SCIM Provisioning page.
In the confirmation pop-up, click Regenerate to proceed.
A new Client Secret will be generated and displayed once. Copy and store it securely before leaving the page, then update your identity provider configuration with the new value.
Copy and store your new client secret securely before leaving the page.
Delete SCIM configuration
If your organization no longer needs SCIM provisioning, on the SCIM Provisioning page, click Delete Configuration.
In the confirmation pop-up, type DELETE in the box and click Delete to proceed. The configuration will be permanently removed. You will need to re-enable SCIM and reconfigure your identity provider to resume provisioning.
This action cannot be undone.
How SCIM provisioning works
User creation
When a user is created in your identity provider, RXNT automatically creates a corresponding staff account. RXNT uses a fixed set of accepted attributes during provisioning — any unmapped or extra attributes are ignored and do not affect account creation.
The following fields are provisioned from your identity provider and will be read-only in RXNT:
- First Name
- Last Name
- Username
- Cell Phone
These fields will be disabled in the Location & Staff Management, Providers, and Account Setup pages.
Default access level
All SCIM-provisioned users are created with the Admin Staff access level by default, meaning they have no chart access. Practice administrators must log in to RXNT after provisioning to assign access.
User deactivation
When a user is deactivated in your identity provider, their RXNT account is automatically deactivated and they will no longer be able to log in.
After provisioning: required steps
SCIM creates staff accounts, but additional setup is required before users can work in RXNT.
Staff users
Navigate to Location & Staff Management from the utility menu to assign the staff member to the appropriate location(s) and set the appropriate access level for the user.
Click here to learn more about assigning access to staff users.
Providers
If a SCIM-provisioned staff member needs to be set up as a provider in RXNT:
Navigate to Providers from the utility menu and click Add Provider. Check the box to Choose from a list of existing users and select the staff user account that was created by SCIM. Then, complete the rest of the provider details.
Click here to learn more about enrolling providers.
Using SCIM with SSO
When SCIM is used together with SSO, RXNT user accounts are automatically linked to the corresponding identity provider account at the time of provisioning. This means SCIM-provisioned users do not need to manually link their RXNT account to their identity provider to use SSO to log in.
Because the account link is established during provisioning, no separate RXNT password is created for these users. Users should always log in through their identity provider using SSO.
If a SCIM-provisioned user attempts to use the Forgot Password link on the RXNT login page, they may inadvertently create standalone RXNT credentials, bypassing the intended SSO login path. Practice administrators should instruct all SCIM-provisioned staff to avoid using the Forgot Password flow.
Still, need help? Contact us!
Have a great idea? Tell us about it!