# Migrating from Keeper Bridge to SCIM Provisioning

### Disable Keeper Bridge Service

Close Keeper Bridge Application and **stop** and **disable** the service on the machine

<figure><img src="https://1788380714-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LU7OPCLsEVoxlYAD7eo%2Fuploads%2FMQR2fIPhEt4RhnGA7dwQ%2Fimage.png?alt=media&#x26;token=e3d7750a-6852-4522-855f-3aa6e4717450" alt=""><figcaption></figcaption></figure>

Remove Bridge Provisioning from your Keeper Admin Console

<figure><img src="https://1788380714-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LU7OPCLsEVoxlYAD7eo%2Fuploads%2FzNz2xZNqAnII8aLsMLzb%2Fimage.png?alt=media&#x26;token=7f726994-36a8-4f94-88d9-30cc5977db39" alt=""><figcaption></figcaption></figure>

### Move all users from sub-nodes to the top-level SSO node

Navigate to the lowest level of your node setup

![](https://1788380714-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LU7OPCLsEVoxlYAD7eo%2Fuploads%2FsxBryyK5rlqfkdZLQ4sh%2Funknown.png?alt=media\&token=89576898-6edc-459c-a704-d663cd4ad4e4)

Move all users from sub-nodes to the top-level SSO node

![](https://1788380714-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LU7OPCLsEVoxlYAD7eo%2Fuploads%2FrqiKDSTUp8Ciu2TduNK5%2Funknown.png?alt=media\&token=f2548e2f-81ed-42ac-8f40-7e762c6e85d5)

#### Using Keeper Commander

Moving users to other nodes can be labor-intensive at scale. We recommend using [Keeper Commander](https://docs.keeper.io/keeperpam/commander-cli) to perform the move.

* Moving all users from node "Bridge" and its subnodes using `action-report`:

{% code overflow="wrap" %}

```
action-report --target all --node "Bridge" --recursive --apply-action move --target-node "SSO"
```

{% endcode %}

* Moving one or more users to a node using `enterprise-user`:

```
enterprise-user [user email] [user email] --node "SSO"
```

<figure><img src="https://1788380714-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LU7OPCLsEVoxlYAD7eo%2Fuploads%2Fppsrx5Cq0EUQZBVMpdFg%2Funknown.png?alt=media&#x26;token=f7c2ac21-6e25-4873-be00-95551b0755eb" alt=""><figcaption></figcaption></figure>

### Configure SCIM Provisioning for your IdP

Refer to the documentation to choose your identity provider (IdP) for SSO Connect, then follow the corresponding SCIM provisioning steps.<br>

* [SSO Connect Cloud](https://app.gitbook.com/s/-MB_i6vKdtG6Z2n6zWgJ/identity-provider-setup)
* [SSO Connect On-Prem](https://app.gitbook.com/s/-LTyMp7XGU8wh-hRPBiB/identity-provider-setup)
* [SCIM Provisioning](https://docs.keeper.io/enterprise-guide/user-and-team-provisioning/azure-ad-provisioning-scim)