Scim Provisioning Targets

AdminUpdated Sep 11, 2026

Dashboard API — authenticated by an Atlas console (platform-instance) session, not a key.

8 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.

Method & path	Idem	Explanation
`GET /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets`		Outbound SCIM provisioning targets Atlas pushes users to; bearer shown as has_* only.
`POST /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets`		Create an outbound SCIM target. The downstream bearer is write-only. Owner or admin.
`GET /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets/:id`		One outbound SCIM target with its sync health, bearer redacted.
`PATCH /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets/:id`		Edit an outbound SCIM target (name, base URL, bearer, mapping, pause/resume). Owner or admin.
`DELETE /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets/:id`		Remove an outbound SCIM target. Owner or admin.
`POST /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets/:id/test`		Verify connectivity/auth to the downstream (ServiceProviderConfig). Writes no data. Owner or admin.
`POST /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets/:id/sync_user`		Force one user to sync to the target now (backfill/re-push). Owner or admin.
`POST /v1/dashboard/accounts/:accountId/instances/:instanceId/scim_provisioning_targets/:id/sync_group`		Force one organization (group) to sync now; skips unprovisioned members. Owner or admin.

Was this page helpful?