{"article":{"id":35606437632919,"url":"https://plaid.zendesk.com/api/v2/help_center/en-us/articles/35606437632919.json","html_url":"https://support.plaid.com/hc/en-us/articles/35606437632919-How-do-I-set-up-SCIM-in-the-Dashboard","author_id":404884178913,"comments_disabled":true,"draft":false,"promoted":false,"position":0,"vote_sum":0,"vote_count":0,"section_id":16110423025815,"created_at":"2025-10-13T20:51:14Z","updated_at":"2026-05-31T18:53:41Z","name":"How do I set up SCIM in the Dashboard?","title":"How do I set up SCIM in the Dashboard?","source_locale":"en-us","locale":"en-us","outdated":false,"outdated_locales":[],"edited_at":"2026-05-31T18:53:41Z","user_segment_id":null,"permission_group_id":1121774,"content_tag_ids":[],"label_names":[],"body":"

Note: To use SCIM, you must have a Plaid Premium Support Package. To learn more about Plaid Premium Support, contact your Account Manager.

\n

The goal of SCIM (System for Cross-domain Identity Management) or Directory Sync is to enable Plaid’s customers to use their IdP to assign Plaid Dashboard permissions. Users added to their IdP will automatically get access to the Plaid Dashboard, and users added to specific groups will have enhanced Dashboard permissions.

\n

Plaid uses a third-party SSO/SCIM provider, WorkOS, with parts of setup integrated within the Plaid Dashboard. If you have Plaid Premium Support, you can enable SCIM via the Dashboard without needing assistance from your Account Manager.

\n

Steps to configure and maintain

\n

1. Configure SSO via WorkOS

\n

From the Settings > Team Settings > SSO page in the Plaid Dashboard, open the WorkOS Admin Portal and complete the SSO setup for your IdP (see How do I set up SSO in the Dashboard?). SSO must be configured before SCIM can be enabled.

\n

\"\"

\n

\"\"

\n

2. Set up groups via WorkOS

\n

In the WorkOS Admin Portal, configure the directory sync from your IdP and define the groups whose members should receive Plaid Dashboard access. Members of these groups will be provisioned into Plaid during the nightly SCIM sync.

\n

\"\"

\n

\"\"

\n

3. Assign or update permissions and view group members

\n

In the Plaid Dashboard, map each WorkOS group to a Plaid Dashboard permission set. Members of the group will receive that permission level when they are synced. You can view current members of each group and adjust mappings at any time.

\n

\"\"

\n

\"\"

\n

\"\"

\n

4. Run a dry-run test to preview changes

\n

Before enabling SCIM, run a dry-run to see exactly which users and permissions would be added, changed, or removed in the next sync. Review the preview carefully — once enabled, the changes will be applied automatically.

\n

\"\"

\n

\"\"

\n

5. Enable SCIM

\n

Once the dry-run looks correct, click Enable to fully enable SCIM. Changes will be applied during the nightly SCIM sync and will be effective within 24 hours.

\n

\"\"

","user_segment_ids":[]}}