Manage members with SCIM provisioning

Slack supports member provisioning with the System for Cross-domain Identity Management (SCIM) standard. To use provisioning, you’ll need to use a connector app alongside a supported identity provider.

Tips: If you’d like to build a custom script to handle provisioning, see our SCIM API for details.

Manage members

SCIM provisioning allows workspace owners and admins to manage members more efficiently.

✅  What you can do:

🚫  What you can't do:

  • Create guest accounts (You’ll need to create guests as members, and then restrict their role to a guest from the Members page.)
  • Set up user group handles (unique display names)

Set up provisioning

Your SCIM provisioning setup will vary depending on the identity provider that you use. Here are the ones that we support:

During set up, your identity provider will ask for an API token created through the OAuth 2.0 flow.

Slack also supports live syncing of Active Directory groups for workspaces using these identity providers.

Note: Members added through SCIM are billable as soon as they sign in for the first time. The cost of new member accounts will be prorated for the remainder of your current billing period.

Using Slack Enterprise Grid? Learn how to connect IDP groups to workspaces on your Enterprise Grid organisation.

Who can use this feature?
  • Workspace owners can turn on this feature so that Admins can manage provisioning.
  • Available on the Plus and Enterprise Grid subscriptions.