SCIM audit logging Support

Cloudflare dashboard SCIM provisioning operations are now captured in Audit Logs v2, giving you visibility into user and group changes made by your identity provider.

Logged actions:

Action Type · Description

Create SCIM User · User provisioned from IdP

Replace SCIM User · User fully replaced (PUT)

Update SCIM User · User attributes modified (PATCH)

Delete SCIM User · Member deprovisioned

Create SCIM Group · Group provisioned from IdP

Update SCIM Group · Group membership or attributes modified

Delete SCIM Group · Group deprovisioned

For more details, refer to the Audit Logs v2 documentation.