--- title: Monday.com SCIM API Integration on Truto slug: mondaycomscim category: Ticketing canonical: "https://truto.one/integrations/detail/mondaycomscim/" --- # Monday.com SCIM API Integration on Truto **Category:** Ticketing **Status:** Beta ## Unified APIs ### Unified User Directory API - **Users** — The User object represents a User. ## How it works 1. **Link your customer's Monday.com SCIM account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Monday.com SCIM.** The Proxy API is a 1-to-1 mapping of the Monday.com SCIM API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate license reclamation for Monday.com Enterprise seats** — SaaS management and FinOps platforms can detect inactive Monday.com users and automatically deactivate them via SCIM, reclaiming expensive Enterprise licenses and reporting cost savings to customers. - **Enforce continuous access compliance for SOC 2 and ISO 27001 audits** — Compliance automation platforms can cross-reference active Monday.com users against HRIS records to prove that terminated employees had access revoked on their exact termination dates, satisfying auditor requirements without manual evidence gathering. - **Power zero-touch employee onboarding into Monday.com** — IT automation and onboarding platforms can provision new hires into Monday.com and assign them to the correct Teams the moment they're marked as hired in HR systems, eliminating manual setup tickets and granting day-one access to relevant workspaces. - **Centralize user directory management across work management tools** — Identity governance platforms can offer Monday.com as a managed application in their catalog, allowing IT admins to push profile updates, team assignments, and deactivations from a single pane of glass alongside dozens of other SaaS apps. - **Trigger instant offboarding to close security gaps** — Security and IT operations platforms can immediately deactivate a departing employee's Monday.com account as part of an automated offboarding workflow, preserving historical project and ticket data while revoking access in seconds. ## What you can build - **Automated user provisioning pipeline** — Automatically create Monday.com accounts with correct profile attributes when new employees appear in a central directory or HRIS. - **Instant access revocation on termination** — Deactivate Monday.com users in real time when an employee is terminated in the source system, without deleting their historical work data. - **Group-to-Team mapping engine** — Map directory groups to Monday.com Teams so that team membership changes in the IdP automatically grant or revoke access to the correct ticketing and project workspaces. - **Inactive user detection and seat optimizer** — Surface Monday.com users who are still active but no longer present in the central directory, and offer one-click or automated deactivation to reclaim Enterprise seats. - **Quarterly user access review dashboard** — Generate audit-ready reports showing every Monday.com user, their team assignments, and whether their access aligns with current HRIS employment status. - **Profile drift auto-correction** — Detect when a user's title, timezone, or email changes in the source directory and automatically push the updated attributes to Monday.com via SCIM. ## FAQs ### What authentication method does Monday.com SCIM use? Monday.com SCIM uses OAuth bearer token authentication. A SCIM API token is generated within the Monday.com admin panel and passed as a Bearer token in the Authorization header for all requests. ### Which Monday.com plans support SCIM? SCIM API access is restricted to Monday.com's Enterprise plan. Organizations on lower-tier plans cannot use SCIM provisioning. ### What SCIM operations are supported for users and groups? You can create users (POST /Users), update user attributes and activation status (PATCH /Users), and manage Team membership (PATCH /Groups). Monday.com specifically requires the PATCH verb for adding or removing individual users from Teams, which prevents overwriting the entire team roster. ### Does Monday.com SCIM support bidirectional sync? No. Monday.com SCIM is strictly unidirectional — the external identity provider or SaaS platform pushes user states into Monday.com. Manual profile changes made inside Monday.com are overwritten by the next SCIM sync. ### What happens when a user is deactivated via SCIM? Is their data deleted? Setting a user's active attribute to false immediately revokes their access to Monday.com but preserves all of their historical project, ticketing, and workspace data. The user account is deactivated, not deleted. ### Are Truto tools available for Monday.com SCIM today? Monday.com SCIM tools are built on request. Truto supports the integration through the Unified User Directory API for Users. Contact Truto to have the specific tools and resources you need enabled for your account.