Skip to main content
Unblocked is a fully compliant SCIM 2.0 server. In a typical setup, the SCIM client built into your identity provider calls these endpoints automatically to provision users and groups. You can also invoke the endpoints manually when building or testing a custom SCIM client.

​
Prerequisites

Before you send requests:
  1. Configure SAML identity provider metadata for your team.
  2. Set up SCIM provisioning and create a SCIM API token.
Send the token with each request in the Authorization: Bearer <token> header. You can also authenticate with a Team Access Token or a Personal Access Token that belongs to a team admin. Requests return 403 Forbidden when SAML is not configured or a non-admin member uses a Personal Access Token.

​
Manage users

Use the Users endpoints to create, retrieve, update, or remove users. List requests support the SCIM count, filter, and startIndex query parameters. Use PUT to replace a user’s information or PATCH to change selected attributes. User requests can include the SCIM Enterprise User Schema Extension for attributes such as department and cost center.

​
Manage groups

Use the Groups endpoints to create, retrieve, update, or remove groups and manage their user membership. List requests support the SCIM count, filter, and startIndex query parameters. Use PUT to replace a group’s information or PATCH to change selected attributes or membership.