Directory sync automatically keeps your MarketScale user list in sync with your identity provider (Azure AD, Okta, Google Workspace, etc.). When you add, update, or remove a user in your identity provider, those changes are reflected in MarketScale without anyone needing to do it manually. This is powered by the SCIM (System for Cross-domain Identity Management) protocol, which is an industry standard for automated user provisioning.
How It Relates to SSO
SSO and directory sync are separate features that work well together but serve different purposes:
SSO controls how users log in. Instead of a separate MarketScale password, users authenticate through your identity provider.
Directory sync controls which users exist. It automatically creates, updates, and deactivates MarketScale accounts based on your identity provider's user directory.
You can use SSO without directory sync (and manage users manually), but directory sync without SSO is uncommon.
Both SSO and directory sync are configured in the same setup portal session. When you receive your setup link, you can configure SSO first, then optionally enable directory sync in the same session.
What Directory Sync Does
When directory sync is enabled, changes you make in your identity provider are automatically reflected in MarketScale. Here is how common actions map across systems.
Action in Your Identity Provider | Result in MarketScale |
Assign a user to the MarketScale application | User account is automatically created |
Update a user's name or email | User profile is updated |
Remove a user from the MarketScale application | User account is deactivated |
Disable a user account | User account is deactivated |
When to Use Directory Sync
Directory sync is not required, but it can save significant time depending on how your organization manages users. It is most valuable when:
You have a large number of users accessing MarketScale
Your team has frequent onboarding and offboarding
You want to ensure that former employees lose access promptly
You want to avoid manually managing user accounts in MarketScale
If you have a small team with low turnover, manual user management may be simpler and directory sync may not be necessary.
Setting It Up
Directory sync is configured as part of the SSO setup process. During Step 3 of the SSO setup guide, after configuring your identity provider for SSO, you will see an option to set up directory sync:
Create a SCIM application or connector in your identity provider
Enter the SCIM endpoint URL and bearer token provided in the setup portal
Map user attributes (name, email) between your provider and MarketScale
Assign the users or groups that should be synced
Not sure if your identity provider supports SCIM? Check the compatibility table in Supported Identity Providers for MarketScale SSO.
Frequently Asked Questions
Below are answers to the most common questions we receive about directory sync.
Q: Is directory sync required for SSO?
A: No. Directory sync is optional. You can use SSO on its own and manage user accounts manually.
Q: Can I enable directory sync later?
A: Yes. Return to your setup portal and enable directory sync from there. If you bookmarked the portal during your initial SSO setup, you can access it directly.
Q: How quickly do changes sync?
A: Most changes propagate within a few minutes, but this depends on your identity provider. Some providers batch SCIM updates on a schedule (e.g., Azure AD syncs every 40 minutes by default).
Q: What happens to existing MarketScale users when I enable directory sync?
A: Existing users are matched by email address. If a user in your identity provider matches an existing MarketScale account, they are linked automatically. Users that do not match are created as new accounts.
Q: Can I sync only some users?
A: Yes. In your identity provider, you control which users or groups are assigned to the MarketScale application. Only assigned users are synced.
Related: