AdministrationWorkspacesSSO

SCIM

SCIM (System for Cross-domain Identity Management) lets your Identity Provider (IdP) manage users and groups in your ElevenLabs workspace.

Overview

SCIM is available for Enterprise workspaces. Only Workspace Admins can configure these settings.

Set up SCIM

Follow these steps to connect your Identity Provider (IdP) to ElevenLabs.

1

Open SCIM settings

Go to Workspace settings > Security & SSO > SCIM.

2

Generate a token

Click Generate Token. Copy the Base URL and Bearer token immediately.

The token is only shown once. If you lose it, you must generate a new one, which will invalidate the previous token.

3

Configure your identity provider

In your IdP SCIM/Provisioning configuration:

  • Set the SCIM Endpoint/Connector URL to the Base URL.
  • Set the authentication mode to bearer token and paste your token.

For provider-specific instructions, see Setup by Identity Provider.

Revoking access: If a user is removed or deactivated via SCIM, their workspace access is revoked, but their historical activity remains associated with the workspace.

Capabilities

ElevenLabs supports the SCIM 2.0 protocol with the following capabilities:

FeatureSupported?Details
Discovery Endpoints✅ Yes/ServiceProviderConfig, /Schemas, /ResourceTypes
Users✅ YesGET, POST, PUT, PATCH, DELETE
Updating a user’s primary email address❌ No
Groups✅ YesGET, POST, PUT, PATCH, DELETE
Search✅ YesGET with ?filter or POST to /.search
Pagination✅ YesSupports startIndex and count
Bulk Operations✅ YesMax operations per request: 100, Max payload size: 1MB
Attribute filtering✅ YesSupports attributes and excludedAttributes
Sorting❌ NosortBy and sortOrder are ignored when querying

Supported attributes

  • Users: userName, name, emails, active, externalId
  • Groups: displayName, members, externalId

Email address changes are not supported through SCIM. Updating a user’s primary email in your IdP can cause SCIM sync failures for that user.

Setup by Identity Provider

1

Open provisioning settings

In the Microsoft Entra admin center, select your ElevenLabs app, then open Provisioning.

2

Set provisioning mode

Set Provisioning Mode to Automatic.

3

Add SCIM credentials

In Admin Credentials:

  • Set Tenant URL to your ElevenLabs SCIM Base URL.
  • Set Secret Token to your ElevenLabs Bearer token.
4

Test and enable provisioning

Click Test Connection, save the configuration, then set Provisioning Status to On when ready.

1

Create or open a custom app integration

Open the ElevenLabs app that is used for SSO sign-in and go to General.

2

Enable SCIM on the app

Click Edit in App Settings, then set Provisioning to SCIM.

3

Configure SCIM connection

In Provisioning > Settings > Integration:

  • Set the SCIM connector base URL to your ElevenLabs SCIM Base URL.
  • Choose the provisioning actions your workspace needs (for example, push new users, push profile updates, and push groups), then run Test Connector Configuration and save.
  • Set Authentication Mode to HTTP Header.
  • Paste your ElevenLabs Bearer token in the Authorization field.
  • Click Save
1

Open your app settings

In OneLogin Admin, open your ElevenLabs app.

2

Add SCIM credentials in Configuration

In the Configuration tab:

  • Set SCIM Base URL to your ElevenLabs SCIM Base URL.
  • Set SCIM Bearer token to your ElevenLabs Bearer token.
3

Enable API connection

Go to Provisioning and check “Enable provisioning” for the app.