# Ensure Vercel team has directory sync (SCIM) enabled for automated provisioning

- Source: https://support.icompaas.com/support/solutions/articles/a_1790262005978520-ensure-vercel-team-has-directory-sync-scim-enabled-for-automated-provisioning
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Vercel cloud](https://support.icompaas.com/support/solutions/c_1790103019086234) › [Vercel checks](https://support.icompaas.com/support/solutions/folders/f_1790103034130491)
- Last updated: 2026-09-24
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure Directory Sync is connected between the Vercel team and the organization's identity provider, and that it is actively syncing. Directory groups should be mapped to the correct Vercel team roles, so users added, changed, or removed in the directory are updated in Vercel automatically.

**Rationale**

When team members are managed by hand, former employees and users who changed teams often keep access long after they should. Directory Sync makes the identity provider the source of truth for team membership and roles, so removing someone from the directory also removes them from Vercel, without any manual steps.

**Impact**

-   Users removed from the directory are removed from Vercel
    
-   Vercel roles follow directory group membership
    
-   Removes manual onboarding and offboarding steps
    

**Default Value**

By default, Directory Sync is not configured and members are managed manually. It is available only on the Enterprise plan.

**Pre-Requisites**

-   Team Owner role
    
-   Enterprise plan
    
-   Admin access to the identity provider
    
-   At least one user mapped to the Owner role, to avoid lockout
    

**Test Plan**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Open Settings in the sidebar and select Security & Privacy.
    
4.  In the Authentication and User Provisioning section, verify that Directory Sync is configured.
    
5.  In the identity provider, verify that provisioning to Vercel is enabled and the last sync succeeded.
    
6.  If Directory Sync is not configured or is failing, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Open Settings in the sidebar and select Security & Privacy.
    
4.  In the Directory Sync row, select Configure.
    
5.  Follow the dialog to connect your identity provider.
    
6.  Map directory groups to Vercel team roles, making sure at least one administrator is mapped to Owner.
    
7.  Review the list of members and click Confirm and Sync.
    

**Backout Plan**

1.  Sign in to the identity provider's admin console.
    
2.  Open the Vercel application and turn off provisioning (SCIM).
    
3.  In Vercel, open Settings > Members and manage member roles manually from now on.
    

**Reference**

-   [https://vercel.com/docs/directory-sync](https://vercel.com/docs/directory-sync)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.