## CreateSCIMConfiguration

**post** `/gitpod.v1.OrganizationService/CreateSCIMConfiguration`

Creates a new SCIM configuration for automated user provisioning.

Use this method to:

- Set up SCIM 2.0 provisioning from an identity provider
- Generate a bearer token for SCIM API authentication
- Link SCIM provisioning to an existing SSO configuration

### Examples

- Create basic SCIM configuration:

  Creates a SCIM configuration linked to an SSO provider with default 1 year token expiration.

  ```yaml
  organizationId: "b0e12f6c-4c67-429d-a4a6-d9838b5da047"
  ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
  ```

- Create SCIM configuration with custom token expiration:

  Creates a SCIM configuration with a 90-day token expiration.

  ```yaml
  organizationId: "b0e12f6c-4c67-429d-a4a6-d9838b5da047"
  ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
  tokenExpiresIn: "7776000s"
  ```

### Body Parameters

- `organizationId: string`

  organization_id is the ID of the organization to create the SCIM configuration for

- `ssoConfigurationId: string`

  sso_configuration_id is the SSO configuration to link (required for user provisioning)

- `name: optional string`

  name is a human-readable name for the SCIM configuration

- `tokenExpiresIn: optional string`

  token_expires_in is the duration until the token expires.
  Defaults to 1 year. Minimum 1 day, maximum 2 years.

### Returns

- `token: string`

  token is the bearer token for SCIM API authentication.
  This is only returned once during creation - store it securely.

- `scimConfiguration: ScimConfiguration`

  scim_configuration is the created SCIM configuration

  - `id: string`

    id is the unique identifier of the SCIM configuration

  - `createdAt: string`

    created_at is when the SCIM configuration was created

  - `organizationId: string`

    organization_id is the ID of the organization this SCIM configuration belongs to

  - `tokenExpiresAt: string`

    token_expires_at is when the current SCIM token expires

  - `updatedAt: string`

    updated_at is when the SCIM configuration was last updated

  - `enabled: optional boolean`

    enabled indicates if SCIM provisioning is active

  - `name: optional string`

    name is a human-readable name for the SCIM configuration

  - `ssoConfigurationId: optional string`

    sso_configuration_id is the linked SSO configuration (optional)

- `tokenExpiresAt: string`

  token_expires_at is when the token will expire

### Example

```http
curl https://app.gitpod.io/api/gitpod.v1.OrganizationService/CreateSCIMConfiguration \
    -H 'Content-Type: application/json' \
    -H "Authorization: Bearer $GITPOD_API_KEY" \
    -d '{
          "organizationId": "b0e12f6c-4c67-429d-a4a6-d9838b5da047",
          "ssoConfigurationId": "d2c94c27-3b76-4a42-b88c-95a85e392c68"
        }'
```

#### Response

```json
{
  "token": "token",
  "scimConfiguration": {
    "id": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
    "createdAt": "2019-12-27T18:11:19.117Z",
    "organizationId": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
    "tokenExpiresAt": "2019-12-27T18:11:19.117Z",
    "updatedAt": "2019-12-27T18:11:19.117Z",
    "enabled": true,
    "name": "name",
    "ssoConfigurationId": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
  },
  "tokenExpiresAt": "2019-12-27T18:11:19.117Z"
}
```