---
title: SCIM audit logging Support
description: Track user and group provisioning events from your identity provider.
image: https://developers.cloudflare.com/changelog-preview.png
---

[Skip to content](#%5Ftop) 

# Changelog

New updates and improvements at Cloudflare.

[ Subscribe to RSS ](https://developers.cloudflare.com/changelog/rss/index.xml) [ View RSS feeds ](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/) 

![hero image](https://developers.cloudflare.com/_astro/hero.CVYJHPAd_26AMqX.svg) 

[ ← Back to all posts ](https://developers.cloudflare.com/changelog/) 

## SCIM audit logging Support

Mar 18, 2026 

[ Cloudflare Fundamentals ](https://developers.cloudflare.com/fundamentals/) 

Cloudflare dashboard SCIM provisioning operations are now captured in [Audit Logs v2](https://developers.cloudflare.com/fundamentals/account/account-security/audit-logs/), giving you visibility into user and group changes made by your identity provider.

![SCIM audit logging](https://developers.cloudflare.com/_astro/2026-03-18-scim-audit-logging.DPKMiE8X_ZojL4c.webp) 

**Logged actions:**

| Action Type       | Description                             |
| ----------------- | --------------------------------------- |
| Create SCIM User  | User provisioned from IdP               |
| Replace SCIM User | User fully replaced (PUT)               |
| Update SCIM User  | User attributes modified (PATCH)        |
| Delete SCIM User  | Member deprovisioned                    |
| Create SCIM Group | Group provisioned from IdP              |
| Update SCIM Group | Group membership or attributes modified |
| Delete SCIM Group | Group deprovisioned                     |

For more details, refer to the [Audit Logs v2 documentation](https://developers.cloudflare.com/fundamentals/account/account-security/audit-logs/).