Set up automatic provisioning via SCIM

You can choose to enable automatic provisioning with SCIM. SCIM pushes any changes you make to Figma, as soon as they happen. SCIM also support importing and deactivating users.

To set up automatic provisioning you will need to an API token in Figma and a SCIM URL. This will allow you to configure automatic provisioning in your identity provider.

Copy your details from Figma

To make the set up process easier, we recommend having both Figma and your identity provider open at the same time.

You can generate an API token and find your Tenant ID on the Settings page of your Organization's Admin Settings:

1. Open Figma and select Admin Settings in the sidebar.
2. Select the Settings tab.

Generate an API token

1. In the Login and provisioning section, click SCIM provisioning.
2. Click Generate API token.
3. Copy the API token value.

Find your Tenant Id

Your identity provider will need a SCIM base URL to configure SCIM. Your Tenant Id will make up part of this URL.

1. In the Login and provisioning section, click SAML SSO.
2. Copy the Tenant ID.
3. Use the tenant Id to create the SCIM base URL: https://www.figma.com/scim/v2/[tenant]

Set up SCIM with your identity provider

The process for setting up provisioning depends on your identity provider.

Configure SCIM

If you're using one of our supported identity providers, you can follow our help articles:

• SAML SSO with Okta
• SAML SSO with Azure Active Directory
• SAML SSO with OneLogin

If you're using an identity provider we haven't listed here, you can still set up SCIM with Figma.

You'll need to set up SAML SSO configuration with your identity provider, before you can configure SCIM. This may require you to set up a custom application.

We aren't able to provide documentation for custom configurations. Please reach out to your identity provider for any assistance with a custom configuration.