Docs

Generate Organization Scim Token

posthttps://app.fossa.com/api/organizations/{id}/scim/token

Generate a SCIM bearer token for an organization, for an identity provider to authenticate against the `/api/scim` endpoints. Any existing scim token for the organization is revoked first, so at most one is ever valid. The token is returned only in this response and cannot be retrieved again. Requires the `scimProvisioning` feature flag and a configured SSO method.

Path parameters

idintegerrequired

Responses

200OK
tokenstringrequired

The generated SCIM bearer token, for the identity provider to authenticate against the `/api/scim` endpoints. FOSSA stores only a hash of it, so this response is the only time it is ever returned — it cannot be retrieved again afterward.

400Bad Request
uuidstring

Unique identifier associated with the error

codeinteger

fossa specific error code

messagestring

message associated with this error

namestring

name of the error

httpStatusCodeinteger

http status code number

401Unauthorized
uuidstring

Unique identifier associated with the error

codeinteger

fossa specific error code

messagestring

message associated with this error

namestring

name of the error

httpStatusCodeinteger

http status code number

403Forbidden
uuidstring

Unique identifier associated with the error

codeinteger

fossa specific error code

messagestring

message associated with this error

namestring

name of the error

httpStatusCodeinteger

http status code number

404NotFound
uuidstring

Unique identifier associated with the error

codeinteger

fossa specific error code

messagestring

message associated with this error

namestring

name of the error

httpStatusCodeinteger

http status code number

Try this endpoint

Build a request and run it against app.fossa.com.

Bearer

Stored in this browser for 24 hours. Try It uses a docs proxy for CORS and does not store tokens server-side.

POST https://app.fossa.com/api/organizations/1/scim/token
curl --request POST \  --url 'https://app.fossa.com/api/organizations/1/scim/token' \  --header 'accept: application/json' \  --header 'authorization: Bearer YOUR_API_TOKEN'

Real request. Mutating methods can change data.

Click Try It to run a request and see the response here.
Enter a Bearer token before running this request.

Path params

idintegerrequired
← All Organization Settings endpoints