---
title: "Rotate SCIM Token"
method: POST
path: "/scim/configuration/{organizationId}/rotate-token"
tags: ["Users"]
---

# Rotate SCIM Token

`POST /scim/configuration/{organizationId}/rotate-token`

Issues a new SCIM bearer token. The previous token stays valid for a grace window (default 24h), then is revoked. The new token is only returned once.

## Path parameters

- `organizationId` string, required

## Request body

- AccountApiRotateScimTokenRequestBody, nullable
  - `gracePeriodHours` number

## Response `200`

- AccountApiRotateScimTokenResponse
  - `bearerToken` string, required
  - `scimEndpointUrl` string, required
  - `id` string, required
  - `previousBearerTokenExpiresAt` string, date-time
  - `organizationId` string, required
  - `mode` 'jit' | 'scim' | 'hybrid-legacy'
  - `hybridLegacyEligible` boolean
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required

---

[API](https://skmtc.dev/envzero/apis/env0-api.md) · [All operations](https://skmtc.dev/envzero/apis/env0-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/envzero/env0-api/revisions/513441cbe9dc/schema)