Cloudflare dashboard SCIM provisioning operations are now captured in Audit Logs v2, giving you visibility into user and group changes made by your identity provider.
Logged actions:
| Action Type | Description |
|---|---|
| Create SCIM User | User provisioned from IdP |
| Replace SCIM User | User fully replaced (PUT) |
| Update SCIM User | User attributes modified (PATCH) |
| Delete SCIM User | Member deprovisioned |
| Create SCIM Group | Group provisioned from IdP |
| Update SCIM Group | Group membership or attributes modified |
| Delete SCIM Group | Group deprovisioned |
For more details, refer to the Audit Logs v2 documentation.
Source: Cloudflare
![Prevent/Fix: Microsoft Baseline Security Mode has automatically trigger Entra Conditional Access policy creation [MC1246002]](https://mwpro.co.uk/wp-content/uploads/2025/06/graffiti-6656040_1920-96x96.webp "Prevent/Fix: Microsoft Baseline Security Mode has automatically trigger Entra Conditional Access policy creation [MC1246002] 7")
