Create a Provisioning SCIM token

TypeScript

import { MyOrganizationClient } from "@auth0/myorganization-js";

async function main() {
    const client = new MyOrganizationClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.organization.identityProviders.provisioning.scimTokens.create("idp_id", {
        token_lifetime: 86400,
    });
}
main();

import { MyOrganizationClient } from "@auth0/myorganization-js";

async function main() {
    const client = new MyOrganizationClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.organization.identityProviders.provisioning.scimTokens.create("idp_id", {
        token_lifetime: 86400,
    });
}
main();

package example

import (
    context "context"

    myorganization "github.com/auth0/myorganization-go/v2"
    client "github.com/auth0/myorganization-go/v2/client"
    option "github.com/auth0/myorganization-go/v2/option"
)

func do() {
    c, err := client.New(
        "{YOUR_DOMAIN}",
        option.WithToken(
            "<token>",
        ),
    )
    if err != nil {
        return
    }
    request := &myorganization.CreateIdpProvisioningSCIMTokenRequestContent{
        TokenLifetime: myorganization.Int(
            86400,
        ),
    }
    c.Organization.IdentityProviders.Provisioning.SCIMTokens.Create(
        context.TODO(),
        "idp_id",
        request,
    )
}

using Auth0.MyOrganizationApi;
using System.Threading.Tasks;
using Auth0.MyOrganizationApi.Organization.IdentityProviders.Provisioning;

public partial class Examples
{
    public async Task Example() {
        var client = new MyOrganizationClient(new MyOrganizationClientOptions
        {
            Domain = "{YOUR_DOMAIN}",
            TokenProvider = new DelegateTokenProvider(_ => Task.FromResult("<token>"))
        });

        await client.Organization.IdentityProviders.Provisioning.ScimTokens.CreateAsync(
            idpId: "idp_id",
            request: new CreateIdpProvisioningScimTokenRequestContent {
                TokenLifetime = 86400
            }
        );
    }

}

package com.example.usage;

import com.auth0.client.myorganization.auth.MyOrganizationClient;
import com.auth0.client.myorganization.organization.identityproviders.provisioning.types.CreateIdpProvisioningScimTokenRequestContent;

public class Example {
    public static void main(String[] args) {
        MyOrganizationClient client = MyOrganizationClient
            .builder()
            .domain("{YOUR_DOMAIN}")
            .token("<token>")
            .build();

        client.organization().identityProviders().provisioning().scimTokens().create(
            "idp_id",
            CreateIdpProvisioningScimTokenRequestContent
                .builder()
                .tokenLifetime(86400)
                .build()
        );
    }
}

from auth0.myorganization import MyOrganizationClient

client = MyOrganizationClient(
    domain="{YOUR_DOMAIN}",
    token="<token>",
)

client.organization.identity_providers.provisioning.scim_tokens.create(
    idp_id="idp_id",
    token_lifetime=86400,
)

curl --request POST \
  --url https://{tenantDomain}/my-org/v1/identity-providers/{idp_id}/provisioning/scim-tokens \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "token_lifetime": 86400
}
'

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}/my-org/v1/identity-providers/{idp_id}/provisioning/scim-tokens",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'token_lifetime' => 86400
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}/my-org/v1/identity-providers/{idp_id}/provisioning/scim-tokens")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"token_lifetime\": 86400\n}"

response = http.request(request)
puts response.read_body

{
  "token_id": "tok_tuz8H9hWQ8LaCkdh",
  "token": "tok_tuz8H9hWQ8LaCkdh....",
  "created_at": "2025-04-11T20:11:45.431Z",
  "valid_until": "2025-04-12T20:11:45.431Z"
}

POST

identity-providers

{idp_id}

provisioning

scim-tokens

TypeScript

import { MyOrganizationClient } from "@auth0/myorganization-js";

async function main() {
    const client = new MyOrganizationClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.organization.identityProviders.provisioning.scimTokens.create("idp_id", {
        token_lifetime: 86400,
    });
}
main();

import { MyOrganizationClient } from "@auth0/myorganization-js";

async function main() {
    const client = new MyOrganizationClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.organization.identityProviders.provisioning.scimTokens.create("idp_id", {
        token_lifetime: 86400,
    });
}
main();

package example

import (
    context "context"

    myorganization "github.com/auth0/myorganization-go/v2"
    client "github.com/auth0/myorganization-go/v2/client"
    option "github.com/auth0/myorganization-go/v2/option"
)

func do() {
    c, err := client.New(
        "{YOUR_DOMAIN}",
        option.WithToken(
            "<token>",
        ),
    )
    if err != nil {
        return
    }
    request := &myorganization.CreateIdpProvisioningSCIMTokenRequestContent{
        TokenLifetime: myorganization.Int(
            86400,
        ),
    }
    c.Organization.IdentityProviders.Provisioning.SCIMTokens.Create(
        context.TODO(),
        "idp_id",
        request,
    )
}

using Auth0.MyOrganizationApi;
using System.Threading.Tasks;
using Auth0.MyOrganizationApi.Organization.IdentityProviders.Provisioning;

public partial class Examples
{
    public async Task Example() {
        var client = new MyOrganizationClient(new MyOrganizationClientOptions
        {
            Domain = "{YOUR_DOMAIN}",
            TokenProvider = new DelegateTokenProvider(_ => Task.FromResult("<token>"))
        });

        await client.Organization.IdentityProviders.Provisioning.ScimTokens.CreateAsync(
            idpId: "idp_id",
            request: new CreateIdpProvisioningScimTokenRequestContent {
                TokenLifetime = 86400
            }
        );
    }

}

package com.example.usage;

import com.auth0.client.myorganization.auth.MyOrganizationClient;
import com.auth0.client.myorganization.organization.identityproviders.provisioning.types.CreateIdpProvisioningScimTokenRequestContent;

public class Example {
    public static void main(String[] args) {
        MyOrganizationClient client = MyOrganizationClient
            .builder()
            .domain("{YOUR_DOMAIN}")
            .token("<token>")
            .build();

        client.organization().identityProviders().provisioning().scimTokens().create(
            "idp_id",
            CreateIdpProvisioningScimTokenRequestContent
                .builder()
                .tokenLifetime(86400)
                .build()
        );
    }
}

from auth0.myorganization import MyOrganizationClient

client = MyOrganizationClient(
    domain="{YOUR_DOMAIN}",
    token="<token>",
)

client.organization.identity_providers.provisioning.scim_tokens.create(
    idp_id="idp_id",
    token_lifetime=86400,
)

curl --request POST \
  --url https://{tenantDomain}/my-org/v1/identity-providers/{idp_id}/provisioning/scim-tokens \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "token_lifetime": 86400
}
'

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}/my-org/v1/identity-providers/{idp_id}/provisioning/scim-tokens",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'token_lifetime' => 86400
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}/my-org/v1/identity-providers/{idp_id}/provisioning/scim-tokens")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"token_lifetime\": 86400\n}"

response = http.request(request)
puts response.read_body

{
  "token_id": "tok_tuz8H9hWQ8LaCkdh",
  "token": "tok_tuz8H9hWQ8LaCkdh....",
  "created_at": "2025-04-11T20:11:45.431Z",
  "valid_until": "2025-04-12T20:11:45.431Z"
}

Authorizations

Authorization

string

header

required

The access token received from the authorization server in the OAuth 2.0 flow.

Scopes

create:my_org:identity_providers_scim_tokens

OAuth2ClientCredentials

Create a provisioning SCIM token for this identity provider

create:my_org:identity_providers_scim_tokens

OAuth2AuthCode

Create a provisioning SCIM token for this identity provider

Path Parameters

idp_id

string

required

read-only

Identity provider identifier.

Pattern: ^con_[A-Za-z0-9]{16}$

Body

application/json

token_lifetime

integer | null

Lifetime of the token in seconds. If omitted, the connection profile's default expiry applies, or its maximum allowed expiry if no default is set; if neither is set, the token does not expire. Set to null for a non-expiring token; this is rejected if the connection profile sets a maximum allowed expiry.

scopes

enum<string>[]

The scopes of the token. Must be a subset of the scopes allowed by the connection profile. Defaults to all the scopes allowed by the connection profile.

Minimum array length: 1

Available options:

get:users,

post:users,

patch:users,

delete:users,

put:users

Response

Provisioning SCIM token successfully created.

token_id

string

required

The token identifier.

created_at

string<date-time>

required

The token's created at timestamp.

token

string

required

The SCIM client's token.

scopes

string[]

The token's scopes.

valid_until

string<date-time>

The token's valid until at timestamp (will not exist for non-expiring tokens).