--- title: Zapier SCIM API Integration on Truto slug: zapierscim category: Application Development canonical: "https://truto.one/integrations/detail/zapierscim/" --- # Zapier SCIM API Integration on Truto **Category:** Application Development **Status:** Beta ## Unified APIs ### Unified User Directory API - **Users** — The User object represents a User. ## How it works 1. **Link your customer's Zapier SCIM account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Zapier SCIM.** The Proxy API is a 1-to-1 mapping of the Zapier SCIM API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate Zapier user provisioning from your identity platform** — IAM and IdP platforms can offer native Zapier SCIM integration so their customers' IT admins can automatically create Zapier accounts when employees join, eliminating manual provisioning and ensuring Day 1 access to corporate automation workflows. - **Enforce instant offboarding across SaaS apps including Zapier** — HR and IT automation platforms need to revoke access to Zapier the moment an employee is terminated. Integrating with Zapier SCIM ensures deactivation happens in real time, preventing ex-employees from accessing sensitive Zaps and connected third-party APIs. - **Reclaim unused Zapier licenses through usage-based deprovisioning** — SaaS management and FinOps platforms can pull active Zapier users via SCIM, cross-reference with login activity, and automatically deactivate dormant accounts — reclaiming expensive Enterprise license seats for their customers. - **Run compliance access reviews against Zapier workspaces** — Identity governance and compliance platforms need to audit who has access to which Zapier Team workspaces for SOC 2 and similar frameworks. Querying Zapier SCIM programmatically replaces manual spreadsheet-based reviews with continuous, automated reconciliation. - **Sync department structures to Zapier Team workspaces** — HRIS and IT platforms can map organizational departments to Zapier SCIM Groups, automatically placing new hires into the correct Team workspace so they inherit the right shared Zaps without IT intervention. ## What you can build - **Zero-touch Zapier account provisioning** — Automatically create Zapier user accounts with correct name, email, and active status when a new employee is onboarded in your customer's directory. - **Real-time Zapier access revocation on termination** — Instantly deactivate a user's Zapier account via SCIM PATCH when their employment status changes to terminated in the source system. - **Dormant license detection and auto-reclamation** — List all active Zapier users, flag accounts with no recent activity, and programmatically deactivate them to free up license seats. - **Workspace membership sync from org chart** — Map department or team attributes from an HR system to Zapier SCIM Groups, automatically adding or removing users from the correct Team workspaces. - **Continuous access reconciliation dashboard** — Periodically pull Zapier's active user list and compare it against your customer's central directory to surface unauthorized or orphaned accounts in a compliance-ready view. - **Bulk user import for Zapier Enterprise rollouts** — Enable IT admins to provision an entire department into Zapier in one action by iterating SCIM user creation and group assignment calls through a single workflow. ## FAQs ### What authentication method does Zapier SCIM use? Zapier SCIM uses bearer token authentication. A SCIM API token is generated from the Zapier admin console and must be included in the Authorization header of every request. Truto handles token storage and injection so your end users just complete a one-time setup. ### Which Zapier plans support SCIM provisioning? Zapier SCIM is only available on Zapier's premium Team and Enterprise tiers. End users on Free, Starter, or Professional plans will not be able to generate a SCIM token or use these endpoints. ### Can I retrieve deactivated users from Zapier SCIM? No. Zapier's GET /Users endpoint historically returns only active users. If you need to track deactivated accounts, you should maintain state on your side rather than relying on Zapier to return a historical log of deactivated profiles. ### What SCIM resources does Zapier expose? Zapier's SCIM v2 API exposes two resources: Users (create, list, update/deactivate) and Groups (create, list, manage membership). Groups map to Zapier Team workspaces. ### Does Truto have pre-built tools for Zapier SCIM? Zapier SCIM tools are built on request. Truto's Unified User Directory API covers the Users resource. Contact Truto to get Zapier SCIM tooling provisioned for your account — typical turnaround is fast once requested. ### How does deprovisioning work — is the user deleted or deactivated? Zapier SCIM follows the deactivation model rather than hard deletion. You send a PATCH request setting the user's active attribute to false, which locks them out of the workspace. The user record is not permanently deleted via the SCIM API.