After configuring SCIM, which action verifies that group membership is being synchronized?

Add a user to a group in the identity provider and check if the user appears in the corresponding Atlassian group

Review the Atlassian audit log for SCIM events

Ensure the domain is still verified

Check the SCIM API token's permissions

When configuring SCIM in an identity provider like Okta or Azure AD, which two pieces of information from Atlassian are required?

The SCIM endpoint URL and the API token

The domain name and the product license key

The organization ID and the admin email

The SAML SSO URL and the certificate

After configuring SCIM provisioning from Okta to Atlassian Cloud, an admin wants to verify that group memberships are syncing correctly. What is the best way to test this?

Ask a user to log in and confirm they can see the group.

Check the Okta logs for SCIM group operations.

Verify the SCIM token is still valid in Atlassian administration.

Create a test group in Okta, assign a test user, and check if the group appears in Atlassian with the user as a member.

An organization has been using SCIM provisioning from Okta to Atlassian Cloud for a year. The admin wants to rotate the SCIM API token as a security best practice. What is the correct procedure?

SCIM tokens cannot be rotated; you must disable and re-enable SCIM.

Delete the existing token and create a new one; Okta will automatically pick it up.

Regenerate the token in Okta and paste it into Atlassian.

Generate a new token in Atlassian administration and update it in Okta, then delete the old token.

What happens to a group in Atlassian Cloud when it is deleted in the identity provider?

The group remains but its members are removed

The group is automatically removed from Atlassian Cloud

The group is archived for 30 days before deletion

The group is kept until an admin manually deletes it

AtlassianCloud Organization Admin

Domain 2Objective 3

Configure SCIM User Provisioning ACP-520 Practice Questions (Page 1)

Part of the Atlassian Access and Authentication domain, which makes up ~44% of our current practice bank. Atlassian does not publish an official question count, but from its 90-minute exam (~35–60 total, ~15–26 in this domain), expect 5–9 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 1–5

1foundation · easy
After configuring SCIM, which action verifies that group membership is being synchronized?
Select an answer first
2foundation · easy
When configuring SCIM in an identity provider like Okta or Azure AD, which two pieces of information from Atlassian are required?
Select an answer first
3application · medium
After configuring SCIM provisioning from Okta to Atlassian Cloud, an admin wants to verify that group memberships are syncing correctly. What is the best way to test this?
Select an answer first
4application · medium
An organization has been using SCIM provisioning from Okta to Atlassian Cloud for a year. The admin wants to rotate the SCIM API token as a security best practice. What is the correct procedure?
Select an answer first
5foundation · easy
What happens to a group in Atlassian Cloud when it is deleted in the identity provider?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACP-520

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Atlassian. “ACP-520” is a trademark of its owner, used for identification only.