Skip to main content
Question

Box API is SCIM

  • May 23, 2025
  • 5 replies
  • 335 views

Forum|alt.badge.img
I am wondering if Box API is SCIM compliant in terms of user administrating automation (user create, update, delete).
If Box API is SCIM compliant, it would be also helpful if you can provide me with any reference guide (URLs) for that API.

5 replies

Forum|alt.badge.img

Hi Takase,

Looking at our SSO documentation, that you can find here for more details, it doesn't specifically say it is SCIM compliant.

However it does support single sign on (SSO) using the standard SAML assertions and it does allow you to set up auto provisioning and deprovisioning.

Let us know if this helps with your use case.

Best regards

 


Forum|alt.badge.img
Hi Rui,
 
Thank you for your suggestion.
 
SCIM is a standardized protocol for account administration/management (see the following link for details), and not for SSO.
 
Box has APIs for account administration/management (an example reference url follows), but those APIs do not seem SCIM compliant. (for example, userName attribute is required in SCIM but not in Box API)
 
If you are aware of any Box API reference for user creation other than the link above, please let me know.
 
Regards

Forum|alt.badge.img

Hi Takase,

What is your ultimate goal?

If it is auto-provisioning and de-provisioning users in box via some 3rd party identity provider, then please look at this document to see if it supports your preferrer vendor.

If not, please help me understand your use case.

Best regards


Forum|alt.badge.img
Hi Rui,
 
It is my ultimate goal to automate provisioning and deprovisioning users in box via SCIM protocol, because I have a SCIM-compliant tool at hand and would like to use the tool for the automation.
This is the reason why I asked whether the box API for user administration is SCIM compliant.
 
Regards

Forum|alt.badge.img

Hi Takase,

I understand. We do not have generic SCIM compliant end points that you can use, although Box does provide integrations with most identity providers, even generic ones.

I do invite you to read this note:

https://support.box.com/hc/en-us/articles/360043696514-Setting-Up-Single-Sign-On-SSO-for-your-Enterprise#ssoonyourown

Best regards