All Collections
Command
SCIM/SSO
Create or Refresh an Org's SCIM Token
Create or Refresh an Org's SCIM Token

Generate a new token for SCIM user provisioning

Updated over a week ago

An organization's System for Cross-Domain Identity Management (SCIM) token authenticates Azure Active Directory (AD) or Okta to dynamically provision users and groups in Verkada Command.

Generate a SCIM token

  1. In Verkada Command, go to All Products > Admin page.

  2. Select Privacy & Security > SCIM Configuration to manage the SCIM configuration.

  3. Click Add Domain and enter the desired email domains.

  4. (Optional) Toggle off Send Email Invites if you do not want users to receive an email invite when their account is created.

    The newly generated SCIM token displays.

  5. Select the token to copy it to your clipboard.

⚠️ Warning. Immediately update your Azure AD or Okta configuration with this new token. Once the page is reloaded, the token does not re-appear.

Refresh a SCIM token

If you want to regenerate this token, such as if it is lost or compromised, you can do this in Command.

Note: Once you refresh an organization's SCIM token, the previous token is immediately invalidated. As such, you should immediately copy the new token into Azure AD or Okta to ensure there is no interruption to your user provisioning.

Requirements

  • Your organization must already have had SCIM provisioning enabled.

  • You must be an Organization Admin (Org Admin) to refresh the SCIM token.

How it works

  1. In Command, go to All Products > Admin.

  2. Select Privacy & Security > SCIM Configuration.

  3. Click Refresh.

  4. When the warning message displays, click Continue to confirm.
    The newly generated SCIM token displays.

  5. Select the token to copy it to your clipboard. This new token revokes the previous one and cannot be undone. You should see a notification that your new token has been successfully generated.

⚠️ Warning. Immediately update your Azure AD or Okta configuration with this new token. Once the page is reloaded, the token does not re-appear.

Learn more


Need more help? Contact Verkada Support

Did this answer your question?