Configure SCIM for self-managed GitLab instances

Introduced in GitLab 15.8.

You can use the open standard System for Cross-domain Identity Management (SCIM) to automatically:

  • Create users.
  • Block users.

The internal GitLab SCIM API implements part of the RFC7644 protocol.

If you are a user, see configuring SCIM for groups.

Configure GitLab


To configure GitLab SCIM:

  1. On the top bar, select Main menu > Admin area.
  2. On the left sidebar, select Settings > General.
  3. Expand the SCIM Token section and select Generate a SCIM token.
  4. For configuration of your identity provider, save the:
    • Token from the Your SCIM token field.
    • URL from the SCIM API endpoint URL field.

Remove access

Removing or deactivating a user on the identity provider blocks the user on the GitLab instance, while the SCIM identity remains linked to the GitLab user.

To update the user SCIM identity, use the internal GitLab SCIM API.