The API token must be included via an Authorization header with a type of Bearer when calling any of the SCIM methods.

If you intend to build a Slack app for other teams to install your app will need to properly handle the OAuth flow to generate the proper token. For example, if an Admin account generates a SCIM token, they can take action on other Admins or members. One more note: the token generated can only action on accounts with the same or fewer permissions. The token-generating account must remain an Owner or Admin in order to make SCIM updates. On Enterprise Grid, Org Owners and Admins can use SCIM to modify users, however, only Org Owners can install the SCIM app. The token-generating account must remain an Admin or Owner in order to make SCIM updates. On Business+, Slack Owners and Admins can generate a token to use the SCIM API. Acquire an OAuth tokenĪn OAuth token with the admin scope is required to access the SCIM API. All SCIM methods are branches of this base URL. The base URL for all calls to the SCIM API is.

It behaves slightly differently than other Slack APIs, as it is a proper REST API and thus expects HTTP verbs to be used in a specific manner. Like other Slack APIs, the SCIM methods are accessed over that old standby protocol, HTTP. Of course, our support team is ready to assist you should you run into any trouble.

Please test your scripts thoroughly before executing them. Be aware that it's possible to de-provision an entire workspace or Enterprise Grid organization with SCIM.

Slack scim api