Firezone ditches SCIM to build its own directory sync engine

Building reliable (and fast) directory sync

Firezone ditches SCIM to build its own directory sync engine

Directory sync is the process of copying users and groups from an identity provider like Okta or Entra into your app. Firezone explains why SCIM, the standard for this, fails in practice due to inconsistent provider implementations, and how they built a pull-based sync engine that handles pagination, rate limits, bad responses, and overlapping jobs.

It's entirely possible you'll end up with a more complicated (and brittle) implementation going the SCIM route than if you built a pull-based system that hits each provider's API separately.

More from this day

2026-10-02