> ## Documentation Index
> Fetch the complete documentation index at: https://docs.collabase.ch/llms.txt
> Use this file to discover all available pages before exploring further.

# SCIM 2.0 Provisioning

> Automatically manage your users and groups from Okta, Microsoft Entra ID (Azure AD), or Google Workspace.

<Warning>
  **Closed Beta:** The SCIM integration is currently in Closed Beta. To use SCIM, you need a paid license, as the free tier (up to 10 users) does not support automated identity provisioning.
</Warning>

# SCIM 2.0 Provisioning

With SCIM (System for Cross-domain Identity Management), you don't have to manually create or remove users in Collabase. Your identity provider (like Okta or Microsoft Entra ID) will automatically push user and group changes to Collabase.

## What you need to do

To connect your identity provider to Collabase, you need two things:

1. **The Base URL:** This is the address your provider will talk to.
   ```text theme={"dark"}
   https://your-collabase.ch/api/scim/v2
   ```
2. **The SCIM Token:** This is the secure key your provider uses to authenticate.

### How to get your SCIM Token

<Steps>
  <Step title="Open Admin Settings">
    Log in to Collabase as an Administrator and go to the Admin area.
  </Step>

  <Step title="Navigate to Identity Providers">
    Click on **Identity Providers** in the sidebar.
  </Step>

  <Step title="Enable SCIM provisioning">
    In the **SCIM Provisioning** section, toggle **Enable SCIM provisioning** on. Requests are rejected with a 403 until this is on, regardless of whether your token is valid.
  </Step>

  <Step title="Generate Token">
    Click **Generate token**. Copy this token immediately and paste it into your identity provider — it is not shown again.
  </Step>
</Steps>

## Provider setup guides

We have gathered the official setup guides for the most common providers to help you get started:

<CardGroup cols={2}>
  <Card title="Okta" icon="shield" href="https://developer.okta.com/docs/guides/scim-provisioning-integration-connect/">
    Follow the official Okta guide to add a new SCIM connection.
  </Card>

  <Card title="Microsoft Entra ID" icon="microsoft" href="https://learn.microsoft.com/en-us/entra/identity/app-provisioning/user-provisioning">
    Follow the official Microsoft guide to provision users via Azure AD.
  </Card>
</CardGroup>

## Troubleshooting

If users are not syncing correctly, check the following:

* Ensure **Enable SCIM provisioning** is toggled on in Collabase — a valid token alone is not enough.
* Ensure the SCIM Token hasn't expired or been revoked.
* Check the audit logs in your identity provider to see if the connection to your Collabase server is being blocked by your company firewall.