--- updatedAt: 2026-06-30T12:52:56.000Z --- Fetch the complete documentation index at: https://developers.asana.com/llms.txt. Use this file to discover all available pages before exploring further. # SCIM > 📘 Accessing SCIM endpoints > > Only [Service Accounts](https://asana.com/guide/help/premium/service-accounts) in [Enterprise Domains](https://asana.com/enterprise) can access SCIM endpoints. Asana supports [SCIM 2.0](https://www.simplecloud.info/#Overview) operations at `https://app.asana.com/api/1.0/scim`. Okta provides [documentation](https://developer.okta.com/docs/concepts/scim/) for understanding SCIM. > 📘 Provisioning and deprovisioning users with SCIM > > To learn more about how SCIM works – including setup and customization in the [Admin Console](https://help.asana.com/s/article/how-to-access-the-admin-console) – visit our [Help Center article on provisioning and deprovisioning users with SCIM](https://help.asana.com/s/article/provisioning-and-deprovisioning-users-with-scim).
# Service provider configuration endpoints | HTTP method | API endpoint | Asana behavior | | ----------- | ------------------------ | --------------------------- | | `GET` | `/ServiceProviderConfig` | Read-only meta information. | | `GET` | `/ResourceTypes` | Read-only meta information. | | `GET` | `/Schemas` | Read-only meta information. |
# User endpoints | HTTP method | API endpoint | Asana behavior | | :---------- | :----------- | :--------------------------------------------------------------------------------------------------------------------------------------------------- | | `GET` | `/Users` | Return full list of users in the domain. Does not return Asana guest users.
The accepted query parameters are:
1. filter for `userName`. | | `GET` | `/Users/:id` | Return specific user in the domain. Does not return Asana guest users. | | `POST` | `/Users` | Create a new user if the User does not exist. | | `PUT` | `/Users/:id` | Update / remove attributes for a User. Deprovision user (zombify) in Asana if `active=false`. | | `PATCH` | `/Users/:id` | Add / update attributes for a user. Deprovision user (zombify) in Asana if `active=false`. | | `DELETE` | `/Users/:id` | Deprovision user (zombify) in Asana. | ## Accepted attributes | Attribute | Type | Info | | --------------------------------------------------------------------------------------- | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `userName` | string | Unique identifier for the user, typically used by the user to directly authenticate to the service provider. Each user MUST include a non-empty `userName` value, and it must be an email address. *Required*. | | `userType` | string | The type of Asana license to assign to the user (e.g., "enterprise" or "view only"). *Note: This attribute is currently only returned/accepted for[view only](https://help.asana.com/s/article/view-only) domains.* | | `name` | complex | The user's name. | | `name.givenName` | string | Unsupported for `PATCH` request, use `name.formatted`. | | `name.familyName` | string | Unsupported for `PATCH` request, use `name.formatted`. | | `name.formatted` | string | The full name of the user. | | `emails` | multi-valued complex | Email addresses for the user. | | `email.value` | string | Email address for the user. | | `email.primary` | string | Whether this email address is the preferred email address for this user. `true` may only appear once for this attribute. | | `active` | boolean | Indicates whether the user's account is active in Asana. | | `title` | string | The user's title, such as "Vice President". | | `preferredLanguage` | string | The user's preferred language. Used for selecting the localized User interface. | | `addresses` | multi-valued complex | The user’s address. | | `address.country` | string | The user’s country. | | `address.region` | string | The user’s region. | | `address.locality` | string | The user’s city. | | `phoneNumbers` | multi-valued complex | The user’s phone. | | `phoneNumber.value` | string | The user’s phone number value. | | `roles` | multi-valued complex | The RBAC role of the user. The "value" property of a role must be an ID retrieved from Admin Console ([Learn more about setting up roles with SCIM](https://help.asana.com/s/article/setting-up-asana-roles-in-microsoft-entra-id-with-scim?language=en_US#set-up-the-roles-attribute-and-attribute-mapping-in-entra-id)). | | `licensingDivisionId` | string | The numeric GID of the licensing division under which the user is licensed. Applies only to Enterprise organizations with sub-divisions enabled. When set to a valid sub-division GID, the user's license is moved to that sub-division. Setting this field to the organization's domain GID moves the user back to the parent billing division. [Learn more about Licensing Divisions](https://help.asana.com/s/article/setting-up-licensing-division-id-with-scim?language=en_US). | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User"` | complex | The Enterprise User Schema Extension attribute. | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.department"` | string | The department the user belongs to. | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.costCenter"` | string | The cost center user belongs to. | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.organization"` | string | The organization user belongs to. | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.division"` | string | This metadata field indicates which division that the user belongs to. Note: In this context, division is an *organizational construct*, and is distinct from the [Asana division](https://asana.com/guide/team/onboard/divisions-invited-users) concept. As such, this metadata can be used to help reflect organizational structure in Asana (e.g., division, organization, department, cost center, etc.). | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.employeeNumber"` | string | A string identifier, typically numeric or alphanumeric, assigned to a person. | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.manager"` | complex | The user’s manager. | | `"urn:ietf:params:scim:
schemas:extension:enterprise:
2.0:User.manager.value"` | string | The user’s manager’s user ID. | ## Examples ```json Request: GET https://app.asana.com/api/1.0/scim/Users?filter=userName eq "johnsmith@example.com" Response: 200 OK { "Resources": [ { "id": "1", "name": { "familyName": "John", "givenName": "Smith", "formatted": "John Smith" }, "userName": "johnsmith@example.com", "emails": [ { "value": "johnsmith@example.com", "primary": true, "type": "work" } ], "active": true, "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User", "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User" ], "title": "Software Engineer", "addresses": [ { "locality": "Vancouver", "region": "BC", "country": "CA", "type": "work", "primary": true } ], "phoneNumbers": [ { "value": "111-111-1111", "type": "work", "primary": true } ], "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": { "department": "R&D", "costCenter": "CC_ID", "organization": "Asana", "division": "Product", "employeeNumber": "ID1", "manager": { "value": "2" } }, "userType": "enterprise", "licensingDivisionId": "12345", "roles": [ { "value": "12345" } ] } ], "totalResults": 1, "schemas": [ "urn:ietf:params:scim:api:messages:2.0:ListResponse" ] } ``` ```json Request: POST https://app.asana.com/api/1.0/scim/Users { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User", "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User" ], "userName": "johnsmith@example.com", "name": { "formatted": "John Smith" }, "emails": [ { "primary": true, "value": "johnsmith@example.com" } ], "active": true, "title": "Software Engineer", "preferredLanguage": "en", "addresses": [ { "locality": "Vancouver", "region": "BC", "country": "CA" } ], "phoneNumbers": [ { "value": "111-111-1111" } ], "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": { "department": "R&D", "costCenter": "CC_ID", "organization": "Asana", "division": "Product", "employeeNumber": "ID1", "manager": { "value": "2" } }, "userType": "enterprise", "licensingDivisionId": "12345", "roles": [ { "value": "12345", "primary": true } ] } Response: 201 Created { "id": "1", "name": { "familyName": "John", "givenName": "Smith", "formatted": "John Smith" }, "userName": "johnsmith@example.com", "emails": [ { "value": "johnsmith@example.com", "primary": true, "type": "work" } ], "active": true, "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User", "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User" ], "title": "Software Engineer", "preferredLanguage": "en", "addresses": [ { "locality": "Vancouver", "region": "BC", "country": "CA", "type": "work", "primary": true } ], "phoneNumbers": [ { "value": "111-111-1111", "type": "work", "primary": true } ], "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": { "department": "R&D", "costCenter": "CC_ID", "organization": "Asana", "division": "Product", "employeeNumber": "ID1", "manager": { "value": "2" } }, "userType": "enterprise", "licensingDivisionId": "12345", "roles": [ { "value": "12345" } ] } ``` ```json Request: PATCH https://app.asana.com/api/1.0/scim/Users/1 { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:PatchOp" ], "Operations": [ { "op": "replace", "value": { "title": "Senior Software Engineer" } } ] } Response: 200 OK { "id": "1", "name": { "familyName": "John", "givenName": "Smith", "formatted": "John Smith" }, "userName": "johnsmith@example.com", "emails": [ { "primary": true, "value": "johnsmith@example.com", "type": "work" } ], "active": true, "preferredLanguage": "en", "title": "Senior Software Engineer", "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": { "department": "R&D" }, "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User", "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User" ], "userType": "enterprise", "licensingDivisionId": "12345", "roles": [ { "value": "12345" } ] } ```
# Group endpoints SCIM Groups are equivalent to Asana [teams](/reference/getteam). | HTTP method | API endpoint | Asana behavior | | :---------- | :------------ | :------------------------------------------------------------------------------------------------------------------------------------------ | | `GET` | `/Groups` | Return full list of team in the domain, including private team.
The accepted query parameters are:
1. filter for `displayName`. | | `GET` | `/Groups/:id` | Return a specific team in the domain. | | `POST` | `/Groups` | Create a new team. | | `PUT` | `/Groups/:id` | Replace the team's attributes. | | `PATCH` | `/Groups/:id` | Update the team's attributes. | ## Accepted attributes | Attribute | Type | Info | | --------------- | -------------------- | ------------------------------------------- | | `displayName` | string | Unique identifier for the team. *Required*. | | `members` | multi-valued complex | The members of the team. | | `members.value` | string | The team member's user ID. | ## Examples ```json Request: GET https://app.asana.com/api/1.0/scim/Groups?filter=displayName eq "Marketing" Response: 200 OK { "Resources": [ { "id": "1", "displayName": "Marketing", "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:Group" ], "meta": { "resourceType": "Group" } } ], "totalResults": 1, "schemas": [ "urn:ietf:params:scim:api:messages:2.0:ListResponse" ] } ``` ```json Request: POST https://app.asana.com/api/1.0/scim/Groups { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:Group" ], "displayName": "Marketing", "members": [ {"value": "1"}, {"value": "2"} ] } Response: 201 Created { "id": 1, "displayName": "Marketing", "members": [ {"value": "1"}, {"value": "2"} ], "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:Group" ], "meta": { "resourceType": "Group" } } ``` ```json Request: PATCH https://app.asana.com/api/1.0/scim/Groups/1 { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:PatchOp" ], "Operations": [ { "op": "add", "path": "members", "value": [ { "value": "3" } ] } ] } Response: 204 No Content ```