Analytics · Beta
Pendo SCIM
API integration
Ship Analytics features without building the integration. Full Pendo SCIM API access via Proxy, normalized data through Unified APIs, and 10+ MCP-ready tools for AI agents — all extensible to your exact use case.
Built for specific customer use cases. Issues are resolved quickly.
Talk to us
Use Cases
Why integrate with Pendo SCIM
Common scenarios for SaaS companies building Pendo SCIM integrations for their customers.
Automate Pendo seat provisioning from your identity platform
Identity governance and access management platforms can offer automated Pendo user provisioning and deprovisioning as part of their JML (Joiner/Mover/Leaver) lifecycle workflows, eliminating manual IT tickets and ensuring zero-touch onboarding and instant offboarding.
Reclaim unused Pendo licenses from your SaaS management dashboard
SaaS management platforms can pull the full Pendo user directory, cross-reference it with login activity, and automatically deactivate dormant users to help customers optimize expensive Pendo Premium seat spend.
Power quarterly access reviews with live Pendo permission data
Compliance and IGA platforms can ingest Pendo Groups and their membership to run automated SOC2/ISO27001 access reviews, letting managers approve or revoke Pendo permissions directly from your product without touching the Pendo admin console.
Enable self-service Pendo access requests via IT helpdesk bots
IT automation and service desk products can offer end-to-end Pendo provisioning — from a Slack or Teams request through manager approval to account creation and group assignment — in seconds instead of days.
Enforce least-privilege access to Pendo analytics and guides
Security platforms can continuously reconcile Pendo group memberships against an authoritative directory, flagging and remediating shadow access where users hold elevated Pendo roles they no longer need.
What You Can Build
Ship these features with Truto + Pendo SCIM
Concrete product features your team can ship faster by leveraging Truto’s Pendo SCIM integration instead of building from scratch.
Automated Pendo user lifecycle management
Provision new Pendo users on hire, update their group memberships on role change, and instantly deactivate accounts on termination — all driven by events from your HRIS or directory source.
Pendo license utilization dashboard
Pull all active Pendo users via the Unified User Directory API and surface a real-time seat count so customers can track consumption against their contract and identify optimization opportunities.
Time-boxed privileged Pendo access grants
Let customers grant temporary elevated Pendo roles by adding a user to a privileged SCIM group for a defined window, then automatically removing them when the window expires.
One-click Pendo access revocation in access reviews
During periodic access certification campaigns, present Pendo group memberships to reviewers and execute instant SCIM group patches when a reviewer clicks revoke.
Pendo permission drift detection
Periodically reconcile Pendo groups and users against your customers' authoritative directory and surface discrepancies as actionable alerts or policy violations.
Bulk Pendo onboarding for new teams
Allow customers to select a cohort of employees from their directory and batch-create Pendo accounts with the correct group assignments in a single workflow.
SuperAI
Pendo SCIM AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_pendo_scim_users
List users provisioned in Pendo through SCIM. Supports SCIM filter (e.g. userName eq "jane@acme.com"). Returns users with id, userName, name, emails, active and groups.
get_single_pendo_scim_user_by_id
Get a single Pendo SCIM user by id. Returns id, userName, name, emails, active, groups and meta. Required: id.
delete_a_pendo_scim_user_by_id
Delete a user from Pendo via SCIM, removing their access to the subscription. Irreversible. Required: id. Returns an empty response on success.
create_a_pendo_scim_user
Provision a new user in Pendo via SCIM. Required: userName, name.givenName, name.familyName, active. Returns the created user with its id.
update_a_pendo_scim_user_by_id
Replace a Pendo SCIM user's attributes (full PUT; omitted attributes are cleared). Required: id, userName, name.givenName, name.familyName, active. Returns the updated user.
pendo_scim_users_partial_update
Partially update a Pendo SCIM user with SCIM PatchOp operations, e.g. deactivate with op replace, path active, value false. Required: user_id, Operations. Returns the updated user.
list_all_pendo_scim_groups
List groups provisioned in Pendo through SCIM; IdP groups appear as teams in Pendo. Supports SCIM filter (e.g. displayName eq "Engineering"). Returns id, displayName and members.
get_single_pendo_scim_group_by_id
Get a single Pendo SCIM group by id. Returns id, displayName, members and meta. Required: id.
create_a_pendo_scim_group
Push a new group to Pendo via SCIM; it appears as a team in Pendo. Required: displayName. Returns the created group with its id.
update_a_pendo_scim_group_by_id
Update a Pendo SCIM group with SCIM PatchOp operations, e.g. add or remove members or rename it. Required: id, Operations. Returns the updated group or an empty response.
delete_a_pendo_scim_group_by_id
Delete a SCIM-pushed group (team) from Pendo. Irreversible. Required: id. Returns an empty response on success.
Why Truto
Why use Truto’s MCP server for Pendo SCIM
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 1050+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
Unified APIs
Unified APIs for Pendo SCIM
Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.
How It Works
From zero to integrated
Start with Pendo SCIM in a free sandbox, usually ready within one business day. No boilerplate, no maintenance burden.
Link your customer’s Pendo SCIM account
Use Truto’s frontend SDK to connect your customer’s Pendo SCIM account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call Pendo SCIM
Truto’s Proxy API is a 1-to-1 mapping of the Pendo SCIM API. You call us, we call Pendo SCIM, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate Pendo SCIM’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about Pendo SCIM on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
What authentication method does Pendo SCIM use?
Pendo SCIM uses a bearer token (SCIM API token) generated from the Pendo admin console. Truto handles storing and injecting this token so your end users only need to paste it once during the connection setup.
What resources are available through the Pendo SCIM integration?
The integration exposes Users and Groups via Truto's Unified User Directory API. Users carry identity attributes (name, email, department) and an active status. Groups carry a name, ID, and an array of member user IDs — and in Pendo, groups directly map to subscription-level roles like Admin or Read Only.
Can I deactivate a Pendo user without deleting their account?
Yes. You issue a PATCH operation on the User resource setting active to false. This suspends login access while preserving the user's historical data and configuration inside Pendo.
How are Pendo roles managed through SCIM?
Pendo maps subscription-level roles (e.g., Admin, Viewer, Guide Creator) to SCIM Groups rather than individual user attributes. To change a user's permissions, you add or remove their ID from the appropriate Group via a PATCH operation on the Group resource.
Does enabling SCIM lock out manual user management in Pendo?
Yes. Once SCIM provisioning is enabled for a Pendo subscription, all user creation, role assignment, and deactivation must flow through the SCIM API. Manual user management in the Pendo UI is disabled to maintain the directory as the single source of truth.
Are Pendo SCIM tools available in Truto today?
Pendo SCIM integration is built on request. Truto supports the Unified User Directory API model (Users and Groups) for this integration. Contact the Truto team to have it activated for your workspace.
Pendo SCIM
Get Pendo SCIM integrated into your app
Our team understands what it takes to make a Pendo SCIM integration successful. A short, crisp 30 minute call with folks who understand the problem.