--- title: Lattice SCIM API Integration on Truto slug: latticescim category: HRIS canonical: "https://truto.one/integrations/detail/latticescim/" --- # Lattice SCIM API Integration on Truto **Category:** HRIS **Status:** Beta ## MCP-ready AI tools Truto exposes 9 tools for Lattice SCIM that AI agents can call directly. - **list_all_lattice_scim_users** — List Lattice SCIM users with optional SCIM filter expressions. Returns each user with id, userName, displayName, active, name, emails, title, timezone, meta, and enterprise/lattice extension attributes. - **create_a_lattice_scim_user** — Create a new Lattice SCIM user. Returns the created user object including id, userName, displayName, active, name, emails, title, timezone, and meta. Required: userName (work email in valid email format). - **get_single_lattice_scim_user_by_id** — Get a single Lattice SCIM user by id. Returns the full user resource including id, userName, displayName, active, name, emails, title, timezone, meta, and enterprise/lattice extension attributes. Required: id. - **update_a_lattice_scim_user_by_id** — Replace a Lattice SCIM user by id. Returns the updated user object including id, userName, displayName, active, name, emails, title, timezone, and meta. Required: id, userName (work email). - **delete_a_lattice_scim_user_by_id** — Delete or deprovision a Lattice SCIM user by id. Returns an empty 204 response on success. Required: id. - **lattice_scim_users_partial_update** — Partially update a Lattice SCIM user by id. Used to activate or deactivate users by setting the active field, and to update syncable attributes like name, title, timezone, department, manager, startDate, birthDate, and gender. Returns: schemas, id, externalId, name, displayName, nickName, userName, profileUrl, title, timezone, active, emails, phoneNumbers, photos, groups, meta,… - **list_all_lattice_scim_schemas** — List Lattice SCIM schema definitions available for user provisioning. Returns 6 schemas including the core User, enterprise extension, and Lattice custom attributes schemas. Returns: id, name, description, attributes, meta. - **list_all_lattice_scim_service_provider_config** — Get the Lattice SCIM ServiceProviderConfig describing which SCIM features the service provider supports. Returns: patch, bulk, filter, sort, changePassword, etag, authenticationSchemes. - **list_all_lattice_scim_resource_types** — List the SCIM resource types available in Lattice. Returns: id, name, endpoint, schema, schemaExtensions. ## How it works 1. **Link your customer's Lattice SCIM account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Lattice SCIM.** The Proxy API is a 1-to-1 mapping of the Lattice SCIM API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate Day-1 Employee Provisioning into Lattice** — HRIS, payroll, and EOR platforms can offer customers zero-touch onboarding by automatically creating Lattice user accounts the moment an employee is hired, eliminating manual setup for HR admins. - **Keep Lattice Org Charts in Continuous Sync** — Platforms that manage org structure, hierarchies, or role changes can push manager, department, and title updates into Lattice so performance review cycles always reflect the current reporting lines. - **Instant Offboarding and License Reclamation** — SaaS management and IT automation tools can deactivate or delete Lattice users the moment an employee leaves, securing sensitive review data and freeing up paid seats without manual IT tickets. - **Directory Reconciliation and Access Audits** — IAM platforms and security tools can pull the full Lattice user list to reconcile against their own directory, flagging orphaned accounts, dormant users, or unauthorized access. - **Ship a SCIM Connector Without Building One** — Identity providers and workforce platforms can add Lattice to their catalogue of SCIM-supported apps in days, using Truto to handle SCIM 2.0 semantics, auth, and schema discovery. ## What you can build - **Automated user provisioning workflows** — Create Lattice users programmatically from your onboarding flow using the SCIM create user endpoint, mapping your internal employee record to Lattice's userName and profile attributes. - **Manager and org-structure sync** — Use partial update (PATCH) to push manager, department, and title changes into Lattice's enterprise user extension so performance reviews route to the correct reviewers. - **One-click deactivation and offboarding** — Deactivate users by patching the active flag to false, or fully remove them via the delete endpoint when an employee is terminated in your system. - **Lattice user directory sync** — List all Lattice users with SCIM filter expressions to maintain a mirrored copy of the workforce in your platform for reporting, audits, or cross-app reconciliation. - **Schema-aware attribute mapping UI** — Use the SCIM schemas and resource types endpoints to dynamically render attribute mapping interfaces for your customers, so they can map custom fields to Lattice without you hardcoding them. - **Capability-driven integration setup** — Query the service provider config endpoint to detect which SCIM operations Lattice supports (PATCH, filtering, bulk) and adapt your sync engine accordingly for reliable provisioning. ## FAQs ### How does authentication work for Lattice SCIM? Lattice SCIM uses bearer token authentication issued from the customer's Lattice admin settings. Truto handles token storage, injection, and refresh so you don't have to manage credentials per customer. ### What user operations are supported? Truto exposes full lifecycle operations on Lattice users: list, get by ID, create, full update (PUT), partial update (PATCH), and delete — covering the complete SCIM 2.0 user resource surface. ### Can I sync custom or enterprise attributes like manager and department? Yes. Lattice supports the SCIM enterprise user extension, so you can push attributes like manager, department, title, and employeeNumber via the partial update endpoint. Use the schemas endpoint to discover the exact attribute paths. ### How do I discover which SCIM features Lattice supports? Use list_all_lattice_scim_service_provider_config to inspect supported operations (PATCH, filter, bulk, sort, etag), and list_all_lattice_scim_schemas and list_all_lattice_scim_resource_types to introspect the User schema and any extensions. ### How fresh is the data pushed into Lattice? SCIM operations are synchronous. When you create, update, or deactivate a user via Truto, the change is reflected in Lattice immediately upon a successful API response — no polling or batch delay. ### Can I filter users when listing them? Yes. Lattice SCIM supports standard SCIM filter expressions (e.g., filtering by userName, active status, or email) on the list users endpoint, which is useful for reconciliation and targeted audits. ### What's the difference between deleting a user and setting active to false? Setting active to false via partial update deactivates the user in Lattice while preserving their historical data (useful for review history). Delete removes the SCIM user resource entirely. Most integrations prefer deactivation for offboarding.