Skip to main content
POST
/
orgs
/
{org_id}
/
scim-tokens
cURL
curl --request POST \
  --url https://api.timbal.ai/orgs/{org_id}/scim-tokens \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "label": "<string>",
  "provider_id": 123
}
'
{
  "created_at": 123,
  "enabled": true,
  "id": "<string>",
  "org_id": "<string>",
  "updated_at": 123,
  "base_url": "<string>",
  "token": "<string>",
  "label": "<string>",
  "last_used_at": 123,
  "provider_id": "<string>"
}

Authorizations

​
Authorization
string
header
required

Timbal API key. Obtain your API key from the Timbal platform settings. See Authentication for more information.

Path Parameters

​
org_id
string
required

Body

application/json

Create a SCIM token for an org.

​
label
string | null

Human label for the admin UI (e.g. "Entra prod").

​
provider_id
integer<int64> | null

Optional IdP connection to bind this token to. When set, SCIM group pushes resolve roles through that connection's group→role mappings; when omitted the token does membership-only SCIM (auto add/remove).

Response

201 - application/json

Token created

Create response: the only time the plaintext token is ever returned. The caller (IdP admin) must copy token now — it can't be retrieved later.

​
created_at
integer<int64>
required
​
enabled
boolean
required
​
id
string
required
​
org_id
string
required
​
updated_at
integer<int64>
required
​
base_url
string
required

The base URL the IdP should target, e.g. https://api.timbal.ai/scim/v2.

​
token
string
required

The bearer token to paste into the IdP's SCIM config. Shown once.

​
label
string | null
​
last_used_at
integer<int64> | null
​
provider_id
string | null