Skip to content
Connect an agent
Organisations

Make or rotate the SCIM token

Makes a bearer token for the identity provider, shown once and stored only as a hash.

POST/orgs/{org}/scim/token

TL;DR

QuestionAnswer
What does it do?Make or rotate the SCIM token.
What does it take?org in the path.
What does it return?Status 201 with a body of type ScimTokenIssued.
What can go wrong?401 not signed in; 403 a member or a reader (orgs.forbidden), a plan without scim (plan.sso_not_included), or the request came from an origin that may not make changes; 404 no such organisation, or the caller is not a member of it; 429 too many requests; 503 organisations are not set up on this server. Every failure uses the one error envelope.

What it does

Makes a bearer token for the identity provider, shown once and stored only as a hash. A live token is revoked at the same moment. Enterprise; the owner and admins.

Path parameters

FieldTypeRequiredDescription
orgstringyesThe organisation's id or its slug.

Responses

StatusMeaningBody
201The token, shown once.ScimTokenIssued
401Not signed in.ErrorResponse
403A member or a reader (orgs.forbidden), a plan without SCIM (plan.sso_not_included), or the request came from an origin that may not make changes.ErrorResponse
404No such organisation, or the caller is not a member of it.ErrorResponse
429Too many requests.ErrorResponse
503Organisations are not set up on this server.ErrorResponse

Response body

A 201 answer has the type ScimTokenIssued.

FieldTypeRequiredDescription
tokenstringyesThe bearer token for the identity provider. Shown once; only its hash is kept.
viewScimTokenViewyes
view.prefixstringyesThe first characters of the token, to tell it apart.
view.createdAtintegeryes
view.lastUsedAtinteger | nullyesWhen the provider last used it, to the minute. Null until it has.

See also

DocWhy
API referenceEvery endpoint, and the error envelope
SchemasEvery request and response type
Tool referenceThe operations as callable tools