Automating user provisioning sounds simple, until you remember everything that provisioning really touches. For most SaaS products, SCIM is “just” user and group lifecycle management. Your identity provider calls an API, accounts get created, access is assigned, and offboarding removes it.