> ## Documentation Index
> Fetch the complete documentation index at: https://launchdarkly.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Using the SCIM API

<View title="Developer" />

<View title="Federal docs" />

<View title="EU docs" />

This topic explains how to use the System for Cross-domain Identity Management (SCIM) API to work with users, roles, and teams in your SSO-enabled LaunchDarkly account.

The SCIM API enables user provisioning of account members from identity providers (IdPs). SCIM enables IdPs such as Okta, OneLogin, or Entra ID to tell LaunchDarkly which users should or should not have an account, and optionally determine what level of access users have in LaunchDarkly.

SCIM uses web (REST) APIs to exchange data formatted in JSON, with a standard schema that works with two resource types: `User` and `Group`. The LaunchDarkly SCIM API maps the `Group` resource to LaunchDarkly teams. Group-based team sync is currently only available through the [Okta](/docs/home/account/okta) integration. We provide an extension schema to work with LaunchDarkly roles. To learn more, read [Teams](/docs/home/account/teams) and [Roles](/docs/home/account/roles).

<Note>
  **You cannot manage teams using the UI after enabling SCIM**

  If you configure SCIM to provision resources from identity providers, you can no longer manage teams using the LaunchDarkly user interface.
</Note>

## Authentication

The SCIM API is only supported for the OAuth2 authorization type. Not all supported third-party providers support user provisioning through SCIM. To learn more about how LaunchDarkly treats users imported from the IdP, read [Default initial role](/docs/home/account/sso#default-initial-role).

All SCIM endpoints require OAuth2 authentication with the `scim` scope. Regular personal access tokens will not work. You must use a SCIM-enabled OAuth client.

The following information is generally needed to configure SCIM in your IdP. The actual names for these fields may vary by IdP:

<View title="Developer">
  * SCIM Base URI: `https://app.launchdarkly.com/trust/scim/v2`
  * Authorization method: `oauth2`
  * Authorization URI: `https://app.launchdarkly.com/trust/oauth/authorize`
  * Access token URI: `https://app.launchdarkly.com/trust/oauth/token`
  * Unique Identifier field for account members: `userName`
</View>

<View title="Federal docs">
  * SCIM Base URI: `https://app.launchdarkly.us/trust/scim/v2`
  * Authorization method: `oauth2`
  * Authorization URI: `https://app.launchdarkly.us/trust/oauth/authorize`
  * Access token URI: `https://app.launchdarkly.us/trust/oauth/token`
  * Unique Identifier field for account members: `userName`
</View>

<View title="EU docs">
  * SCIM Base URI: `https://app.eu.launchdarkly.com/trust/scim/v2`
  * Authorization method: `oauth2`
  * Authorization URI: `https://app.eu.launchdarkly.com/trust/oauth/authorize`
  * Access token URI: `https://app.eu.launchdarkly.com/trust/oauth/token`
  * Unique Identifier field for account members: `userName`
</View>

If you are using the LaunchDarkly app from the [Okta](/docs/home/account/okta) or [OneLogin](/docs/home/account/onelogin) catalog, authentication is handled automatically during the setup wizard.

For Entra ID or any other provider you configure manually, you will also need a **Client ID** and **Client Secret**. [Start a Support ticket](https://support.launchdarkly.com/hc/en-us/requests/new) and we will generate these for you.

<Card icon="https://mintcdn.com/launchdarkly/YIC2H8XW-fomhquw/assets/icons/openapi-logo.svg?fit=max&auto=format&n=YIC2H8XW-fomhquw&q=85&s=dd9578a9668a86e1a8b8c314921f204c" horizontal width="2500" height="2452" data-path="assets/icons/openapi-logo.svg">
  You can also use the REST API: [OAuth2 Clients](/docs/api/oauth2-client)
</Card>

## SCIM API reference

To learn more about working with the SCIM API, read the following topics:

* [SCIM API endpoints](/docs/home/account/scim-api-endpoints)
* [SCIM user schema and attributes](/docs/home/account/scim-user-schema)
* [SCIM user request examples](/docs/home/account/scim-user-requests)
* [SCIM group schema and attributes](/docs/home/account/scim-group-schema)
* [SCIM API error responses](/docs/home/account/scim-errors)
* [SCIM API constraints and troubleshooting](/docs/home/account/scim-troubleshooting)