All SAML SSO configurations in Figma support Just In Time (JIT) provisioning. This is manual provisioning, which only applies any changes when a user next logs into their account, not when an admin makes the changes. JIT supports creating and updating users in Figma.

You can choose to enable automatic provisioning with SCIM. SCIM pushes any changes you make to Figma, as soon as they happen. SCIM also supports importing and deactivating users, and managing members' seat types.

Get your API token and SCIM URL from Figma

To set up automatic provisioning you'll need to an API token in Figma and a SCIM URL. To make the set up process easier, we recommend having both Figma and your identity provider open at the same time.

Generate an API token

You can generate an API token in your organization's admin settings:

1. Open Figma in the file browser and select Admin in the sidebar.
2. Select the Settings tab and navigate to the in the Login and provisioning section.
3. In the Login and provisioning section, click SCIM provisioning.
4. Click Generate API token.
5. Copy the API token value.

Find your Tenant ID

Your identity provider will need a SCIM base URL to configure SCIM. Your Tenant ID will make up part of this URL. You can find your Tenant ID in your organization's admin settings:

1. Open Figma in the file browser and select Admin in the sidebar.
2. Select the Settings tab and navigate to the in the Login and provisioning section.
3. In the Login and provisioning section, click SAML SSO.
4. Copy the Tenant ID.
5. Use your Tenant ID to create the SCIM base URL:
   • https://www.figma.com/scim/v2/[tenantID] (Figma organizations)
   • https://figma-gov.com/scim/v2/[tenantID] (Figma for Government organizations)

Set up SCIM with your identity provider

The process for setting up provisioning depends on your identity provider.

Configure SCIM

If you're using one of our supported identity providers, you can follow our help articles:

• SAML SSO with Google Workspace
• SAML SSO with Okta
• SAML SSO with Microsoft Entra ID
• SAML SSO with OneLogin

If you're using an identity provider we haven't listed here, you can still set up SCIM with Figma.

You'll need to set up SAML SSO configuration with your identity provider, before you can configure SCIM. This may require you to set up a custom application.

We aren't able to provide documentation for custom configurations. Please reach out to your identity provider for any assistance with a custom configuration.

Assign users to the application

When you set up automatic provisioning, you will be asked to assign users to the application.

As part of this process, you may be asked to provide additional information about each user. Figma supports the following common basic attributes, as well as some optional extras.

Basic attributes

Scroll to view table

Display SCIM member metadata

When you have SCIM set up, you can choose which of these attributes you want to access in Figma. That attribute will be shown in the People tab alongside Figma's default data.

1. Open Admin > Settings
2. In the Other section, click Member metadata.
3. Choose from Cost center, organization, division, or department.
4. Figma will show this data in the People tab. You'll be able to sort your member list based on this column.

Guide to organization admin →

SCIM API reference

Figma provides a detailed reference for the Figma SCIM API on Figma's developer site. Use the SCIM API as another way to manage SCIM users and groups. The API reference includes the available endpoints, the supported schemas, and some example requests.