Directory sync automatically keeps your MarketScale user list in sync with your identity provider (Azure AD, Okta, Google Workspace, etc.). When you add, update, or remove a user in your identity provider, those changes are reflected in MarketScale without anyone needing to do it manually. This is powered by the SCIM (System for Cross-domain Identity Management) protocol, which is an industry standard for automated user provisioning.

How It Relates to SSO

SSO and directory sync are separate features that work well together but serve different purposes:

You can use SSO without directory sync (and manage users manually), but directory sync without SSO is uncommon.

Both SSO and directory sync are configured in the same setup portal session. When you receive your setup link, you can configure SSO first, then optionally enable directory sync in the same session.

What Directory Sync Does

When directory sync is enabled, changes you make in your identity provider are automatically reflected in MarketScale. Here is how common actions map across systems.

When to Use Directory Sync

Directory sync is not required, but it can save significant time depending on how your organization manages users. It is most valuable when:

If you have a small team with low turnover, manual user management may be simpler and directory sync may not be necessary.

Setting It Up

Directory sync is configured as part of the SSO setup process. During Step 3 of the SSO setup guide, after configuring your identity provider for SSO, you will see an option to set up directory sync:

Not sure if your identity provider supports SCIM? Check the compatibility table in Supported Identity Providers for MarketScale SSO.

Frequently Asked Questions

Below are answers to the most common questions we receive about directory sync.

Q: Is directory sync required for SSO?
A: No. Directory sync is optional. You can use SSO on its own and manage user accounts manually.

Q: Can I enable directory sync later?
A: Yes. Return to your setup portal and enable directory sync from there. If you bookmarked the portal during your initial SSO setup, you can access it directly.

Q: How quickly do changes sync?
A: Most changes propagate within a few minutes, but this depends on your identity provider. Some providers batch SCIM updates on a schedule (e.g., Azure AD syncs every 40 minutes by default).

Q: What happens to existing MarketScale users when I enable directory sync?
A: Existing users are matched by email address. If a user in your identity provider matches an existing MarketScale account, they are linked automatically. Users that do not match are created as new accounts.

Q: Can I sync only some users?
A: Yes. In your identity provider, you control which users or groups are assigned to the MarketScale application. Only assigned users are synced.

Related:

Keep exploring