Vercel team has directory sync (SCIM) enabled

​

What this check verifies

Vercel team is assessed for directory sync (SCIM) enablement. Directory sync automates user provisioning and deprovisioning by synchronizing team membership with an external identity provider, ensuring timely access revocation when employees leave.

​

Risk

Without directory sync, user provisioning and deprovisioning must be managed manually, increasing the risk of orphaned accounts remaining active after employees leave or change roles. Manual processes are error-prone and may lead to unauthorized access persisting longer than intended.

​

Recommendation

Enable directory sync (SCIM) to automate user lifecycle management. This ensures that team membership stays synchronized with your identity provider, automatically provisioning new members and revoking access when employees leave or change roles.

​

Remediation

Dashboard steps

1. Navigate to your Vercel team settings
2. Go to the Security section
3. Configure directory sync (SCIM) with your identity provider
4. Map identity provider groups to Vercel team roles
5. Enable automated provisioning and deprovisioning

​

References

• https://vercel.com/docs/accounts/team-members-and-roles
• https://vercel.com/docs/security/directory-sync

​

Where this check fires

This check runs on every scheduled scan against your Vercel account. Findings appear at Cloud Security → Findings filterable by Check ID = team_directory_sync_enabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Vercel checks