Cloudflare dashboard SCIM provisioning operations are now captured in Audit Logs v2, giving you visibility into user and group changes made by your identity provider.
Logged actions:
Action TypeDescriptionCreate SCIM UserUser provisioned from IdPReplace SCIM UserUser fully replaced (PUT)Update SCIM UserUser attributes modified (PATCH)Delete SCIM UserMember deprovisionedCreate SCIM GroupGroup provisioned from IdPUpdate SCIM GroupGroup membership or attributes modifiedDelete SCIM GroupGroup deprovisioned For more details, refer to the Audit Logs v2 documentation.
Fetched April 4, 2026