This official feed from the Google Workspace team provides essential information about new features and improvements for Google Workspace customers.
rss_feed
arrow_back Back

July 9, 2026

Streamline identity lifecycle management in Google Workspace with new inbound SCIM support

We are excited to announce the general availability of Google Workspace inbound SCIM APIs to help IT administrators standardize identity lifecycle management. This new capability allows you to sync your Google Workspace directory in real time with any SCIM-compatible Identity Provider (IdP), HR system (HRIS), or custom application.

With inbound SCIM, when a Workspace end user’s account permissions are changed via their organization’s IdP, their access to Workspace data and any downstream apps, such as Gemini Enterprise, will also be updated in real time. Previously, customers would need to build custom integrations using Google directory APIs.

SCIM overview

System for Cross-domain Identity Management (SCIM) is an open protocol that synchronizes directory information between identity systems. With inbound SCIM, Google Workspace acts as a SCIM Service Provider, enabling compatible Identity Providers (IdPs) to automatically provision, update, and deactivate users and groups in real time.

Inbound SCIM offers:

  • Automated lifecycle management: IT teams no longer need to manually create user accounts or update details for Workspace, saving significant time and costs.
  • Seamless onboarding and day-one productivity: New employees have access to all Workspace productivity tools the moment they start, creating a frictionless onboarding experience.
  • Enhanced security with instant deprovisioning: When an employee leaves your organization or changes roles, SCIM instantly pushes an update request to Workspace. This eliminates the security risks associated with orphaned accounts and makes compliance audits significantly easier.
  • Simplified admin experience: Inbound SCIM offers a one-click token generation experience and admin controls to lock synced groups from your external source to prevent manual changes in Workspace that would conflict with your identity provider.

Getting started

  • Admins: This feature will be available by default and can be disabled/enabled at the domain level. Visit the Help Center to learn more.
  • End users: This is an admin-facing feature only.

The Manage external directories page in the Admin console showing Inbound SCIM setup


Configure a new Inbound SCIM connection with external IdP

Rollout pace

Availability

  • Business: Business Starter, Standard, and Plus
  • Enterprise: Enterprise Starter, Standard, and Plus

Resources

Useful Links

Join the official community for Google Workspace administrators

In the Google Cloud Community, discuss the latest features with Googlers and other Google Workspace admins like you. Learn tips and tricks that will make your work and life easier. Be the first to know what's happening with Google Workspace.

Learn about more Google Workspace launches

On the “What’s new in Google Workspace?” Help Center page, learn about new products and features launching in Google Workspace, including smaller changes that haven’t been announced on the Google Workspace Updates blog.

Learn about our customers

Discover how a diverse range of organizations, from small businesses and nimble startups to globally recognized Fortune 500 corporations, leverage the collaborative power of Google Workspace. Explore examples of how teams of are streamlining workflows and driving productivity by utilizing Google-Workspace.