How to set up SCIM with your identity provider

Calendly supports SCIM 2.0 for identity providers like Okta, OneLogin, Entra ID (formerly Azure) and more. Follow this guide or consult your provider's documentation for setup.

Calendly has tested and documented SCIM setup instructions for the following identity providers: Okta, OneLogin, and Microsoft Entra ID (formerly Azure). 

Before you begin

  • You must set up SAML before you set up SCIM. 

  • For easier setup, use separate browser windows: one for Calendly and one for your IdP.

Requirements

  • SCIM base URL

  • Bearer/API token

How to set up SCIM 

  1. In your identity provider, create a custom Calendly application or, if you’ve already set up SSO, use the existing Calendly app. Consult your identity provider’s documentation for more details.

  2. In Calendly, go to AccountOrganization Settings, then Single sign-on.

  3. Under Optional: Connect SCIM, toggle on SCIM provisioning.

  4. Select copy base URL and paste it into the appropriate field in your identity provider. Consult your identity provider’s documentation for more details.

  5. In Calendly, select the appropriate value for When do you want this token to expire?

  6. Select Generate new bearer tokenCopy token, and paste it into the appropriate field for your identity provider.

  7. In Calendly, select Test Connection.

  8. Select Save.

    • Note: if the connection fails, try paste in the Base URL and Copy token again. 

  9. In your identity provider, map the SCIM API attributes to Calendly. See table below for attributes.

    • Note: you should only configure attributes listed in the table. Passing attributes other than the ones listed will result in an error.

  10. In your identity provider, enable provisioning. Consult your identity provider’s documentation for more details on enabling provisioning and assigning users to an app.

 

Calendly attribute

SCIM API attribute

Description

Name (required)

displayName

The user's displayed name

Email address (required)

userName

The email address used by the user to log in to calendly.com

Active (required)

active

When you create a user, this field must be set to ‘true’. Changing it to ‘false’ will deactivate the user in calendly.com and prevent them from logging in. They will also no longer be visible in the admin interface.

No equivalent in Calendly (optional)

externalID

An individual’s unique identifier in your identity provider

Reach out to Developer Support if you need assistance with setup.