---
title: "Issue Scim Token"
method: POST
path: "/scim/connection"
tags: ["scim"]
---

# Issue Scim Token

`POST /scim/connection`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/scim/connection`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

Create or rotate the SCIM connection token. Owners only.

The raw token is returned only in this response.

## Response `200`

Successful Response

- ScimConnectionTokenRead: A freshly issued token. The raw value is returned exactly once.
  - `connection` ScimConnectionRead, required: Status of an organization's SCIM connection. Never carries the token.
    - `id` string, uuid, required
    - `organization_id` string, uuid, required
    - `preview` string, required
    - `status` 'pending' | 'active' | 'disabled', required: Whether the provider's pushes admit users yet.
    - `last_used_at` string, date-time, nullable
    - `revoked_at` string, date-time, nullable
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
  - `token` string, required

## Other responses

- `403`: Only organization owners can issue or rotate the token.

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)