***

title: Configure SCIM with OneLogin
updated: 2025-05-30T00:00:00.000Z
max-toc-depth: 2
----------------

Postman supports [SCIM](https://datatracker.ietf.org/doc/html/rfc7642) (System for Cross-domain Identity Management) provisioning through [OneLogin](https://www.onelogin.com/) with the Postman OneLogin app, enabling you to automate user provisioning and de-provisioning.

You must be an administrator in OneLogin, and a [Postman Admin or Super Admin](/docs/administration/roles-and-permissions/#team-roles) to enable SCIM. It's recommended that you enable SCIM with a [service account assigned the Super Admin role](/docs/administration/enterprise/enterprise-onboarding/#the-super-admin-role).

With SCIM enabled, users won't have the option to leave your teams on their own, and won't be able to change their account email or password. Only Admins, Super Admins, and Organization Managers have permission to remove members. Only administrators in OneLogin have permission to use SCIM to change user account emails if they're associated with a [verified domain](/docs/administration/domain-verification-and-capture/add-and-verify-a-domain/).

Postman is available as an app in OneLogin, allowing you to enable user provisioning along with SSO. Before enabling SCIM, you must [configure SSO with OneLogin](/docs/administration/sso/onelogin/).

## Enable SCIM in OneLogin

To set up provisioning with OneLogin, do the following:

1. [Enable SCIM in Postman](/docs/administration/scim-provisioning/scim-provisioning-overview/#enabling-scim-in-postman) and [generate a SCIM API key](/docs/administration/scim-provisioning/scim-provisioning-overview/#generating-scim-api-key).

2. In OneLogin, go to the Postman app and click **Configuration**.

3. In the **API Connection** section, paste the generated SCIM API key in the **SCIM Bearer Token** text box, then click **Enable**.

   <img alt="OneLogin configuration API connection" src="https://assets.postman.com/postman-docs/onelogin-api-connection.jpg" />

4. In Postman, click **Save**.

## Configure the OneLogin SCIM integration

Postman supports the provisioning features detailed in the [SCIM provisioning overview](/docs/administration/scim-provisioning/scim-provisioning-overview/#scim-features). To configure provisioning, go to the Postman app in OneLogin and click **Provisioning**, then **Enable provisioning**.

<img alt="OneLogin provisioning workflow" src="https://assets.postman.com/postman-docs/onelogin-provisioning-workflow.jpg" />

Select features to enable them, or clear them to turn them off.

You can also define what happens when users are deleted in OneLogin, their Postman app access is removed, or their accounts are suspended. You can choose to **Suspend** these users' Postman accounts or **Do Nothing**. If you choose to **Suspend**, the affected accounts no longer appear in your [Postman organization or team dashboard](https://go.postman.co/settings/team/members). Regardless of your choice, users who are deleted, suspended, or have their app access removed will no longer be able to sign in to their Postman account.

Click **Save** to save your changes.