--- title: Airtable SCIM API Integration on Truto slug: airtablescim category: Ticketing canonical: "https://truto.one/integrations/detail/airtablescim/" --- # Airtable SCIM API Integration on Truto **Category:** Ticketing **Status:** Generally available ## Unified APIs ### Unified User Directory API - **Groups** — Groups are a collection of users in the source application. In some applications, they might also be called Teams. - **Users** — The User object represents a User. ## How it works 1. **Link your customer's Airtable SCIM account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Airtable SCIM.** The Proxy API is a 1-to-1 mapping of the Airtable SCIM API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate employee onboarding and offboarding in Airtable** — HR and IT platforms can automatically provision new users into Airtable when they join the company and deactivate their accounts upon termination, eliminating manual seat management and closing security gaps from stale accounts. - **Run automated User Access Reviews for compliance** — Security and compliance platforms can continuously sync Airtable user states and group memberships to power SOX and SOC 2 User Access Reviews, flagging active Airtable seats that belong to offboarded employees. - **Enable self-service access requests to Airtable workspaces** — IT helpdesk and ITSM products can let end users request access to specific Airtable workspaces via group membership updates, turning approved tickets into instant provisioning without IT intervention. - **Optimize SaaS spend with license auditing and chargebacks** — SaaS management and FinOps platforms can pull Airtable user rosters with department and cost center metadata to identify unused licenses and generate per-department chargeback reports. - **Keep organizational metadata in sync across the identity stack** — Identity governance platforms can push title, department, manager, and division changes from a source-of-truth HRIS into Airtable so that user profiles and audit logs stay accurate without manual updates. ## What you can build - **Real-time user provisioning and deactivation** — Automatically create and deactivate Airtable user accounts in response to HR lifecycle events using the Unified User Directory API for Users. - **Group-based workspace access management** — Add or remove users from Airtable SCIM Groups to grant or revoke access to specific workspaces and org units without touching the Airtable admin console. - **Stale account detection dashboard** — List all Airtable users and their active/inactive status to surface accounts that should be deactivated, helping customers reclaim unused Enterprise licenses. - **Department-level license chargeback reports** — Extract cost center and department fields from Airtable's enterprise user schema to generate automated monthly allocation reports for finance teams. - **Cross-platform org chart synchronization** — Push manager, division, and title updates from an HRIS into Airtable user profiles so organizational hierarchy stays consistent across every SaaS tool. - **Compliance-ready group membership snapshots** — Periodically fetch all Airtable SCIM Groups and their members to produce point-in-time access snapshots for quarterly access certification workflows. ## FAQs ### What Airtable plans support SCIM? User provisioning via SCIM is available on Airtable Business, Enterprise, and Enterprise Scale plans. Group management is restricted to Enterprise and Enterprise Scale only. SAML-based SSO must be enabled before SCIM can be configured. ### What authentication method does Airtable SCIM use? Airtable SCIM uses a bearer token (SCIM API key) generated by an Enterprise admin. This token is passed in the Authorization header for all SCIM API requests. Truto handles token storage and injection so your application never manages raw credentials. ### What filtering is supported on the Airtable SCIM API? Filtering is very limited. For Users, you can only filter by exact equality on userName (email). For Groups, you can only filter by exact equality on displayName. Complex filters, substring matches, and multi-attribute queries are not supported. ### What user profile fields are available through Airtable SCIM? Core fields include userName (email), givenName, familyName, and the active boolean. Airtable also exposes an Enterprise extension schema with costCenter, department, division, organization, and manager — useful for org reporting and license chargebacks. ### Can I fully delete a user via the Airtable SCIM API? Airtable supports both deactivation (PATCH with active set to false) and full deletion (DELETE) of user resources via SCIM. Deactivation is the recommended approach for audit trail purposes, as deletion permanently removes the user record. ### Are Truto tools available for Airtable SCIM today? Airtable SCIM is available through Truto's Unified User Directory API covering Users and Groups. Specific tools beyond the unified API resources are built on request — reach out to the Truto team to scope any custom operations you need.