# Create or Refresh an Organization's SCIM Token

An organization’s System for Cross-Domain Identity Management (SCIM) token authenticates Microsoft Entra ID or Okta to dynamically provision users and groups in Verkada Command.

***

## Generate a SCIM token

{% stepper %}
{% step %}

#### In Verkada Command, go to **All Products > Admin**.

{% endstep %}

{% step %}

#### Select **Login & Access** > **SCIM Users Provisioning** to manage the SCIM configuration.

{% endstep %}

{% step %}

#### Click **Add Domain** and enter the desired email domains.

{% endstep %}

{% step %}

#### (Optional) Toggle off **Send Email Invites** if you do not want users to receive an email invite when their account is created.

The newly generated SCIM token displays.

<div align="left" data-with-frame="true"><img src="https://705858581-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNRq5qDDjsYNxwNzF1bcB%2Fuploads%2Fgit-blob-c910b18392d235c3bc05fa7596d970cde8ac1697%2F0028cbe9b5d00fa3b4b3e92ce4c59268f695fcbe.png?alt=media" alt="" width="606"></div>
{% endstep %}

{% step %}

#### Select the token to copy it to your clipboard.

{% endstep %}
{% endstepper %}

{% hint style="danger" %}
Immediately update your Microsoft Entra ID or Okta configuration with this new token. Once the page is reloaded, the token does not re-appear.
{% endhint %}

***

## Refresh a SCIM token

If you want to regenerate this token, such as if it is lost or compromised, you can do this in Command.

{% hint style="warning" %}
Once you refresh an organization’s SCIM token, the previous token is immediately invalidated. As such, you should immediately copy the new token into Microsoft Entra ID or Okta to ensure there is no interruption to your user provisioning.
{% endhint %}

### Requirements

* Your organization must already have had SCIM provisioning enabled.
* You must be an Organization Admin (Org Admin) to refresh the SCIM token.

### How it works

{% stepper %}
{% step %}

#### In Command, go to **All Products > Admin**.

{% endstep %}

{% step %}

#### Select **Login & Access > SCIM Users Provisioning**.

{% endstep %}

{% step %}

#### Click **Refresh**.

{% endstep %}

{% step %}

#### When the warning message displays, click **Continue** to confirm.

The newly generated SCIM token displays.
{% endstep %}

{% step %}

#### Select the token to **copy** it to your clipboard. This new token revokes the previous one and cannot be undone. You should see a notification that your new token has been successfully generated.

{% endstep %}
{% endstepper %}

{% hint style="danger" %}
Immediately update your Microsoft Entra ID or Okta configuration with this new token. Once the page is reloaded, the token does not re-appear.
{% endhint %}

{% hint style="success" %}
**Need more help?** Contact [Verkada Support](https://help.verkada.com/command/need-help/contact-verkada-support).
{% endhint %}
