SCIM and SSO guide updates

The SCIM Connection Guide and SSO Connection Guide now describe how accounts and attributes work more accurately.

A person's Section Coach account is created the first time they sign in with SSO. Assigning someone to Section in your identity provider sends their profile to Section, and they use a seat only after their first sign-in.

If Section turns on a reporting attribute after your users have already synced, Section applies it to them using the values your identity provider has sent. You no longer need to edit users in your identity provider or run a full re-sync.

The SCIM guide also explains how to send each person's manager for your identity provider. Okta and other SCIM 2.0 identity providers send the manager's email address in the standard manager attribute. Microsoft Entra ID sends the manager's employee ID in the custom attribute manager_employee_id. The Okta setup steps now cover the manager attribute.

The SSO guide has two new questions in its FAQs. One explains who can sign in: anyone assigned to the Section SSO app in your identity provider. If you also use SCIM, assign the SSO app to the same users or groups you sync. The other explains that SCIM keeps profiles up to date and turns off access when someone is deactivated, but your SSO app assignment decides who can sign in.