Skip to content
Connect an agent
Organisations

Read an organisation's SCIM settings

The SCIM base URL, the live token without its value, how many people the provider manages, its groups and their roles, and whether the plan includes SCIM.

GET/orgs/{org}/scim

TL;DR

QuestionAnswer
What does it do?Read an organisation's SCIM settings.
What does it take?org in the path.
What does it return?Status 200 with a body of type ScimSettings.
What can go wrong?401 not signed in; 403 a member or a reader (orgs.forbidden), a plan without scim (plan.sso_not_included), or the request came from an origin that may not make changes; 404 no such organisation, or the caller is not a member of it; 429 too many requests; 503 organisations are not set up on this server. Every failure uses the one error envelope.

What it does

The SCIM base URL, the live token without its value, how many people the provider manages, its groups and their roles, and whether the plan includes SCIM. The owner and admins.

Path parameters

FieldTypeRequiredDescription
orgstringyesThe organisation's id or its slug.

Responses

StatusMeaningBody
200The settings.ScimSettings
401Not signed in.ErrorResponse
403A member or a reader (orgs.forbidden), a plan without SCIM (plan.sso_not_included), or the request came from an origin that may not make changes.ErrorResponse
404No such organisation, or the caller is not a member of it.ErrorResponse
429Too many requests.ErrorResponse
503Organisations are not set up on this server.ErrorResponse

Response body

A 200 answer has the type ScimSettings.

FieldTypeRequiredDescription
availablebooleanyesWhether the organisation's plan includes SCIM (Enterprise).
baseUrlstringyesThe SCIM base URL to give the identity provider.
tokenScimTokenViewyes
token.prefixstringyesThe first characters of the token, to tell it apart.
token.createdAtintegeryes
token.lastUsedAtinteger | nullyesWhen the provider last used it, to the minute. Null until it has.
usersintegeryesHow many people the provider manages here, active or not.
groupsScimGroupView[]yes
groups[].idstringyes
groups[].displayNamestringyes
groups[].role"admin" | "member" | "reader" | nullyesThe role the group gives its members, or null when it gives none.
groups[].membersintegeryes

See also

DocWhy
API referenceEvery endpoint, and the error envelope
SchemasEvery request and response type
Tool referenceThe operations as callable tools