In the app's settings, select OAuth & Permissions from the left navigation.The web service powering your app will need to be able to handle a standard OAuth 2 flow.To get a SCIM app working on a grid organization, do the following: A SCIM app can provision, de-provision, and update team members in just one place rather than having to do so across every workspace in an organization.įor this reason, the OAuth token used for calling SCIM API methods must be obtained from installing the app on the organization, not just a workspace within the organization. On Enterprise Grid, SCIM operations work across the entire organization, not individual workspaces. Using SCIM on an Enterprise Grid organization Provide a JSON request body for POST, PUT, and PATCH write operations, and set your HTTP Content-type header to application/json.Ī SCIM call may take a form like this: GET /scim/v1/Users?count=1000 HTTP/1.1 The API token must be included via an Authorization header with a type of Bearer when calling any of the SCIM methods. If you intend to build a Slack app for other teams to install your app will need to properly handle the OAuth flow to generate the proper token. For example, if an Admin account generates a SCIM token, they can take action on other Admins or members. One more note: the token generated can only action on accounts with the same or fewer permissions. The token-generating account must remain an Owner or Admin in order to make SCIM updates. On Enterprise Grid, Org Owners and Admins can use SCIM to modify users, however, only Org Owners can install the SCIM app. The token-generating account must remain an Admin or Owner in order to make SCIM updates. On Business+, Slack Owners and Admins can generate a token to use the SCIM API. Acquire an OAuth tokenĪn OAuth token with the admin scope is required to access the SCIM API. All SCIM methods are branches of this base URL. The base URL for all calls to the SCIM API is. It behaves slightly differently than other Slack APIs, as it is a proper REST API and thus expects HTTP verbs to be used in a specific manner. Like other Slack APIs, the SCIM methods are accessed over that old standby protocol, HTTP. Of course, our support team is ready to assist you should you run into any trouble. Please test your scripts thoroughly before executing them. Be aware that it's possible to de-provision an entire workspace or Enterprise Grid organization with SCIM.

Slack enterprise cost