An international corporation is deploying Tableau Cloud and needs to synchronize user accounts across multiple regions and systems. Which strategy…

For an international corporation using Tableau Cloud, employing the System for Cross-domain Identity Management (SCIM) protocol is the most effective strategy. SCIM is an open standard designed to automate the exchange of user identity information between identity domains, or IT systems. By integrating Tableau Cloud with a central identity provider (IdP) like Azure AD or Okta via SCIM, the corporation can automate user provisioning and de-provisioning. This ensures that user accounts and group memberships are created, updated, and removed consistently and efficiently across all regions, significantly reducing administrative overhead and the risk of human error while enhancing security.

A. Relying on manual updates by regional IT teams is inefficient, not scalable for a large corporation, and introduces inconsistencies and security risks.

C. A central manual team, while more consistent than regional teams, still represents a significant administrative bottleneck and is not an efficient or scalable solution.

D. Using different protocols per region would create a fragmented and complex identity management architecture, making it difficult to enforce consistent security policies and manage users effectively.

---

1. Tableau Cloud Help

"Configure SCIM with an External Identity Provider": "You can use the System for Cross-domain Identity Management (SCIM) standard to automatically provision and deprovision users and groups in your Tableau Cloud site... Using SCIM can save you time and reduce the errors involved in manually provisioning and deprovisioning users." This document explicitly recommends SCIM for automating user management in Tableau Cloud.

Source: Tableau Official Documentation.

2. IETF RFC 7644

"System for Cross-domain Identity Management: Protocol": This document defines the SCIM protocol. Section 1

Introduction

states that SCIM is designed "to make managing user identities in cloud-based applications and services easier... reducing the cost and complexity of user management operations." This confirms SCIM's purpose aligns directly with the question's requirements for efficiency and consistency.

Source: Peer-reviewed technical standard. Available at https://doi.org/10.17487/RFC7644.

3. Microsoft Entra ID Documentation

"What is application provisioning with Microsoft Entra ID?": "Automated provisioning refers to creating user identities and roles in the cloud applications that users need access to... Microsoft Entra ID supports the SCIM 2.0 protocol for automatic provisioning." This official vendor documentation illustrates the widespread enterprise adoption of SCIM for solving the exact problem described in the scenario.

Source: Microsoft Official Vendor Documentation.