Skip to main content
Question

Box API is SCIM

  • May 23, 2025
  • 5 replies
  • 492 views
Forum|alt.badge.img
I am wondering if Box API is SCIM compliant in terms of user administrating automation (user create, update, delete).
If Box API is SCIM compliant, it would be also helpful if you can provide me with any reference guide (URLs) for that API.

    5 replies

    Forum|alt.badge.img

    Hi Takase,

    Looking at our SSO documentation, that you can find here for more details, it doesn't specifically say it is SCIM compliant.

    However it does support single sign on (SSO) using the standard SAML assertions and it does allow you to set up auto provisioning and deprovisioning.

    Let us know if this helps with your use case.

    Best regards

     

    Forum|alt.badge.img
    Hi Rui,
     
    Thank you for your suggestion.
     
    SCIM is a standardized protocol for account administration/management (see the following link for details), and not for SSO.
    RFC 7644: System for Cross-domain Identity Management: Protocol (rfc-editor.org)
     
    Box has APIs for account administration/management (an example reference url follows), but those APIs do not seem SCIM compliant. (for example, userName attribute is required in SCIM but not in Box API)
    Create user - API Reference - Box Developer Documentation
     
    If you are aware of any Box API reference for user creation other than the link above, please let me know.
     
    Regards
    Forum|alt.badge.img

    Hi Takase,

    What is your ultimate goal?

    If it is auto-provisioning and de-provisioning users in box via some 3rd party identity provider, then please look at this document to see if it supports your preferrer vendor.

    If not, please help me understand your use case.

    Best regards

    Forum|alt.badge.img
    Hi Rui,
     
    It is my ultimate goal to automate provisioning and deprovisioning users in box via SCIM protocol, because I have a SCIM-compliant tool at hand and would like to use the tool for the automation.
    This is the reason why I asked whether the box API for user administration is SCIM compliant.
     
    Regards
    Forum|alt.badge.img

    Hi Takase,

    I understand. We do not have generic SCIM compliant end points that you can use, although Box does provide integrations with most identity providers, even generic ones.

    I do invite you to read this note:

    https://support.box.com/hc/en-us/articles/360043696514-Setting-Up-Single-Sign-On-SSO-for-your-Enterprise#ssoonyourown

    Best regards 

     

    Terms of ServiceAccessibility statement