Mint a bearer token in the admin console — the secret is shown once, is scoped to the tenant, and can be revoked at any time. Give your directory's SCIM connector the base URL {issuer}/v1/idp/scim/v2 and the token (Authorization: Bearer ssct_…). Users, groups and memberships flow in from there; deactivating a user in your directory revokes their access immediately.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article