{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"SCIM API","description":"API documentation for Celonis APIs.","siteUrl":"https://developer.celonis.com/","keywords":"celonis developer portal, celonis apis, celonis api reference docs","lang":"en-US","llmstxt":{"hide":false,"description":"Celonis API documentation","sections":[{"title":"API Docs","description":"Available Celonis API Docs","includeFiles":["**/*.md"],"excludeFiles":[]},{"title":"API Specs","description":"All Celonis API specifications","includeFiles":["**/openapi.yaml"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"scim-api","__idx":0},"children":["SCIM API"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The SCIM API allows for the managing of groups and users within the Celonis Platform. The SCIM API is a well-documented standard, with most resources mentioned on ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://simplecloud.info"},"children":["simplecloud.info"]},". The SCIM API provides a common user schema and a method for automating the exchange of user identity information."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Important"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["All SCIM operations are scoped to a team. Changes to a user in one team do not affect any other memberships for that user."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"base-url","__idx":1},"children":["Base URL"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The base URL for the SCIM API is:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["https://",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["your-team"]},".celonis.cloud/api/user-provisioning"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Replace ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["your-team"]}," with the name of your Celonis instance to access the SCIM API."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"use-cases","__idx":2},"children":["Use Cases"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The SCIM API can be used to:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Manage user identities across cloud-based applications such as your source identity system and your Celonis Platform team."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Integrate Identity Providers / Managers such as Active Directory and Okta to the Celonis Platform in order to automatically provision and manage Celonis users and groups."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"authentication","__idx":3},"children":["Authentication"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The SCIM API supports the OAuth method of authentication:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["OAuth 2.0 token with a scope ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["user-provisioning.scim"]},", passed in an HTTP header like this: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Authorization: Bearer TOKEN"]},"."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Note"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If you are using Azure with SCIM using OAuth in Celonis, then you will need to enter your OAuth scope in the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Token Endpoint"]}," field in Azure. Your Token Endpoint field in Azure will then look like this:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"[https://[TEAM].[REALM].celonis.cloud/oauth2/token?scope=user-provisioning.scim]\n"},"children":[]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["See ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://docs.celonis.com/en/using-oauth-2-0.html"},"children":["this help page"]}," for more information on how to use OAuth 2.0."]}]},"headings":[{"value":"SCIM API","id":"scim-api","depth":1},{"value":"Base URL","id":"base-url","depth":2},{"value":"Use Cases","id":"use-cases","depth":2},{"value":"Authentication","id":"authentication","depth":2}],"frontmatter":{"seo":{"title":"SCIM API"}},"lastModified":"2026-05-13T17:14:31.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/celonis-apis/scim-api/overview","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}