SCIM 2.0
Cloud & Enterprise · Enterprise plan
Splyntra supports SCIM 2.0 (RFC 7644)
so your identity provider can create, update, and deactivate organization members
automatically — no manual invites. SCIM provisioning is gated by the saml_scim
feature (Enterprise), and pairs with SAML/OIDC single sign-on. See
SSO & SCIM.
Endpoint
/scim/v2/Users
Prefix it with your app base URL — https://app.splyntra.com on Cloud.
Authentication
SCIM requests authenticate with a per-org bearer token generated in your organization's SSO settings. Configure it as the "secret token" (or equivalent) in your IdP's provisioning app:
Authorization: Bearer <SCIM token>
The token is scoped to a single organization, so provisioning always targets the correct tenant.
Supported operations
Splyntra implements the SCIM Users resource for the standard provisioning
lifecycle:
| Operation | SCIM request | Effect in Splyntra |
|---|---|---|
| List / query users | GET /scim/v2/Users | Enumerate members of the org |
| Create user | POST /scim/v2/Users | Add a member (provisions on first assignment) |
| Update user | PUT / PATCH /scim/v2/Users/{id} | Update profile attributes |
| Deactivate user | PATCH /scim/v2/Users/{id} (active: false) | Deprovision / remove access |
Deactivating a user in your IdP flows through to Splyntra and revokes their access to the organization.
Setup
- Enable SSO for your organization (SAML 2.0 or OIDC).
- In SSO settings, generate the SCIM bearer token.
- In your IdP's provisioning configuration, set the SCIM base URL to
https://app.splyntra.com/scim/v2and paste the token. - Assign users/groups and let the IdP provision them.
See SSO & SCIM for the full SSO configuration and Organizations & teams for roles.