Calendly supports SAML single sign-on (SSO) for user authentication and SCIM for user provisioning.
Once you’ve enabled SSO for your account, you can use SCIM to automatically add users, update user data, deactivate users, and remove users from your Calendly organization. With SCIM enabled, you can manage Calendly users straight from your identity provider and onboard or off-board employees at scale.
From your identity provider, you can create the following actions in Calendly:
Add a user
Edit a user's name and email
Add a user to a group
Remove a user from a group
Who can enable SCIM
Typically, an IT admin is the best person to set up SCIM. To enable SCIM, you will need to use a Calendly Enterprise account that belongs to an owner or admin.
How to enable SCIM
Supported identity providers
Calendly supports any enterprise identity provider using the SCIM 2.0 protocol. Identity providers we have tested and documented include:
If your identity provider is not listed, view How to set up SCIM with your identity provider.
Before you provision
Make sure you have available seats
To provision users, you must have available seats in Calendly.
The number of users you can provision depends on how many seats are available in Calendly. For example, if you have 20 available seats, you can provision 20 users.
To view how many seats are available, go to your Admin Management page. If all seats are occupied at the time of provisioning, you'll receive an error message in your identity provider.
To add seats, go to the Billing page, select Make changes to your plan, and select Add seats . If you pay by invoice and cannot add seats via the web app, reach out to your Customer Success Manager.
After you provision
Accept the Calendly invitation
Once you've provisioned a user through SCIM, the user will receive an invitation to join your Calendly organization. The user must accept the invitation to join. Once they accept, the user will be prompted to sign in through SSO, and they will fill an open seat in your Calendly organization.
If a user is not receiving their email invitation to join Calendly, reach out to Calendly Support at email@example.com. If the user is a new employee, please mention that in the email.
Assign managed events and groups
Provisioned users will automatically receive a default event type. If you'd like to assign different event types, you can use managed events to give all users the same event type.
Connected calendars and integrations
Changing a user's name
You can change a user's first and last name from your IdP, which will sync over to Calendly.
Changing a user's email address
You can change a user’s email from your IdP. This will update the user's Calendly login email.
Changing a user's role
Changing a user's group
You can change a user's group from your IdP, which will sync over to Calendly.
With a SCIM-enabled account, you can only remove users via your IdP. You cannot remove users via Calendly.
When removing a user, your IdP can issue two calls to Calendly via SCIM: deactivate or delete. Deactivate is the most common action, but this may vary by identity provider.
- If you deactivate a user, their Calendly account is deactivated and the user loses access to Calendly; they cannot log in, host events, and people cannot schedule with them.
- You can choose to re-activate a user and their account at a later stage.
- If you delete a user, the user is removed from your organization's instance and their account is permanently deleted. Once you delete an account, you cannot retrieve it.
- Note: If a user had a Calendly account prior to joining your organization's instance, the user will only be removed for your instance. They will then re-gain access to their original Calendly account as a free, solo user.