CoreWeave’s automated user provisioning (AUP) integrates with SCIM-compliant identity providers and requires SAML SSO to be configured first. Once enabled, the IdP becomes the source of truth for user lifecycle: creating a user in the IdP provisions them in CoreWeave, deactivating them removes their access, and group memberships sync to CoreWeave groups. Only flat groups are supported. Nested groups (groups whose members include other groups) cause provisioning errors. If you use SUNK, AUP can additionally sync SSH public keys from the IdP to your SUNK cluster.
For full details, see Automated user provisioning.
Administrator
Authentication & Access
How does SCIM and automated user provisioning work?
Last modified on June 18, 2026