Automatic User Provisioning with SCIM:
You can now connect a Pencil subscription to its identity provider with SCIM (for IdPs that support SCIM), so the identity provider creates, updates and offboards Pencil users on its own and access stays in sync with the directory in near real time.
Pick groups from a dropdown: when setting up SSO group access with SCIM enabled, subscription admins choose identity provider groups from a list instead of typing each group name by hand
Automatic user creation and updates: new users, name changes and group membership changes flow through without manual edits or waiting for the user's next login
Group changes apply on the user's next action: moving someone between groups in the identity provider updates their Pencil access without them signing in again
Automatic deprovisioning: offboarding a user in the identity provider deactivates them in Pencil, revokes access and ends every active session immediately
