Manage workspaces and billing groups via SCIM in Okta
Written by Figma Man
Updated at June 19th, 2025
- Administration – Figma Learn
- Figma Design – Figma Learn
- Get started – Figma Learn
- FigJam – Figma Learn
- Community – Figma Learn
- Help – Figma Learn
- Work across Figma – Figma Learn
- Courses, tutorials, projects – Figma Learn
- Figma Slides – Figma Learn
- Figma Buzz – Figma Learn
- Figma Make – Figma Learn
- Figma Sites – Figma Learn
Table of Contents
Organizations using SAML SSO in Okta can use SCIM to automatically assign users to a workspace or billing group in Figma.
To manage membership to workspaces and billing groups using Okta:
- Set up a workspace and billing group
- Create a group in Okta
- Add or unlink a push group from the Figma application
- View SCIM groups in Figma
Note: Before you dive in, you’ll need:
- Administrative access to Okta with the scope to add and update groups and applications
- SCIM provisioning enabled
1. Set up a workspace or billing group
You must create at least one workspace or billing group before setting up the corresponding group in Okta.
2. Create a group in Okta
Note: The name of the group in Okta must match the name of the corresponding workspace or billing group.
- Under Directory > Groups, click Add group and enter a name of the group.
- Click Assign People to add users to the group.
3. Add a push group to the Figma application
Push groups in Okta let administrators push group membership from Okta to other applications.
Tip: Push groups do not provision user accounts. To assign a user to the Figma application, navigate to Applications > Figma > Assignments.
When you add a push group, Okta will link the push group to any workspace or billing group with a matching name. All users in the push group will be assigned to the associated workspace or billing group once the push group status is active.
Note:
- Make sure you use separate groups for provisioning and group pushing. Using the same group for both app assignments and group push functions is not currently supported in Okta.
- Members of your organization won’t notice when they are assigned to a billing group. If they are assigned to a workspace, the workspace name will automatically appear in their sidebar in the file browser.
- Navigate to Applications > Figma > Push Groups.
- Click Push Groups > Find Groups by name. Type in the name of the group created in the last section and click on the name when it appears. Click Save.
- Locate the newly added group in the Push Groups tab. When the Push Status is set to Active, your push group has successfully pushed to Figma.
Note:
- If a user is included in multiple push groups, the first push group added to the Figma application in Okta takes precedence
- Depending on the group size, the workspace and billing group assignments may take up to 30 minutes
- Group sizes are limited to 5,000 users
Unlink a push group
Unlinking a push group in Okta removes the SCIM group in Figma. All users managed by the push group will be unassigned from their respective workspace or billing group.
- Navigate to Applications > Figma > Push Groups.
- Locate the group you would like to unlink and click Active > Unlink pushed group.
- Select Delete the group in the target app and click Unlink.
4. View SCIM groups in Figma
You can view the members of any SCIM group you’ve created in Figma.
- From the file browser, click Admin in the left sidebar.
- Select the People tab.
- Click the SCIM group filter and select a group to view members of the group.