> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getunblocked.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SCIM

> Provision and manage users and groups with the SCIM 2.0 API.

Unblocked is a fully compliant SCIM 2.0 server. In a typical setup, the SCIM client built into your identity provider calls these endpoints automatically to provision users and groups. You can also invoke the endpoints manually when building or testing a custom SCIM client.

## Prerequisites

Before you send requests:

1. Configure SAML identity provider metadata for your team.
2. [Set up SCIM provisioning](/team-settings/sso/sso-overview) and create a SCIM API token.

Send the token with each request in the `Authorization: Bearer <token>` header. You can also authenticate with a Team Access Token or a Personal Access Token that belongs to a team admin. Requests return `403 Forbidden` when SAML is not configured or a non-admin member uses a Personal Access Token.

## Manage users

Use the Users endpoints to create, retrieve, update, or remove users. List requests support the SCIM `count`, `filter`, and `startIndex` query parameters.

Use `PUT` to replace a user's information or `PATCH` to change selected attributes. User requests can include the [SCIM Enterprise User Schema Extension](/team-settings/sso/other-saml#enterprise-user-schema-extension) for attributes such as department and cost center.

## Manage groups

Use the Groups endpoints to create, retrieve, update, or remove groups and manage their user membership. List requests support the SCIM `count`, `filter`, and `startIndex` query parameters.

Use `PUT` to replace a group's information or `PATCH` to change selected attributes or membership.