About SCIM API

How it works

System for Cross-domain Identity Management (SCIM) is a standard that automates and simplifies creating, updating, and removing user accounts across cloud apps.

Use SCIM provisioning to automatically sync users from your identity provider (IdP) to Tealium. SCIM creates users with appropriate access during onboarding and removes Tealium access when users are deprovisioned in the identity provider, ensuring consistent offboarding and preventing unauthorized access.

Use a SCIM provisioning connector in your IdP or invoke the SCIM API directly.

Authentication

The Tealium SCIM integration uses a long-lived bearer token to authenticate with applications. Use this bearer token as the SCIM token when you configure your user provisioning application.

All SCIM API calls are authenticated with this bearer token.

Contact Tealium Support to request a long-lived bearer token.

Endpoints and permissions

The Tealium implementation of SCIM supports the following HTTP methods:

Method	Description	Permissions
`POST`	Create a user.	User admin or account admin
`GET`	Retrieve user details or list users.	All account users
`GET`	Retrieve the audit log.	User admin or account admin
`PATCH`	Partially update a user.	User admin or account admin
`PUT`	Replace a user.	User admin or account admin
`DELETE`	Delete a user.	User admin or account admin