Figma SCIM
API integration

list_all_figma_scim_users

List SCIM-provisioned users in the Figma organization (GET /scim/v2/{tenant}/Users). Returns SCIM user resources with id, userName (email), displayName, active, seat role, name, externalId, enterprise attributes (department, cost center, organization) and the figmaAdmin flag. Filter with userName eq "email" or externalId eq "value"; pages with count (max 3000) and startIndex. Calling this also binds existing Figma accounts to SCIM.

get_single_figma_scim_user_by_id

Get one SCIM user in Figma by Figma user id (GET /scim/v2/{tenant}/Users/{id}). Returns the full SCIM user resource. Required: id. To find an id, list users with a userName filter.

delete_a_figma_scim_user_by_id

Permanently delete a user from Figma and from the SCIM provisioning log (DELETE /scim/v2/{tenant}/Users/{id}). To keep the account but revoke access, deactivate instead with partial_update (active=false). Required: id. Returns 204 with no body.

create_a_figma_scim_user

Provision a user in Figma via SCIM (POST /scim/v2/{tenant}/Users). If a Figma account with that email already exists it is bound to SCIM and updated. Required: schemas, userName (email) and active; optional seat role (Enterprise plan), display name, title, name, externalId, enterprise attributes and figmaAdmin. Returns the created user with its Figma id.

update_a_figma_scim_user_by_id

Overwrite all attributes of a SCIM user in Figma (PUT /scim/v2/{tenant}/Users/{id}). Send the complete user; attributes omitted are cleared. Common uses: change email (userName), display name, seat role, cost center. Required: id, schemas, userName, active. Returns the updated user.

figma_scim_users_partial_update

Change selected attributes of a SCIM user in Figma without resending everything (PATCH /scim/v2/{tenant}/Users/{id}, SCIM PatchOp). Example: replace roles with [{"type":"seatType","value":"Dev"}] to change the seat, or replace active with false to deactivate. Required: id (query) and Operations. Returns the updated user.

list_all_figma_scim_groups

List SCIM-managed groups in the Figma organization (GET /scim/v2/{tenant}/Groups). Each group has id, displayName, external_id and members (Figma user ids with display emails). Groups whose displayName matches a Figma workspace or billing group are linked to it. Filter with displayName eq "name" or externalId eq "value"; pages with count and startIndex.

get_single_figma_scim_group_by_id

Get one SCIM group in Figma by group id (GET /scim/v2/{tenant}/Groups/{id}). Returns displayName, external_id and the member list. Required: id.

create_a_figma_scim_group

Create a SCIM group in Figma (POST /scim/v2/{tenant}/Groups). If displayName matches an existing Figma workspace or billing group (case sensitive) the group is linked to it and members inherit it. Required: schemas and displayName; optional externalId and members (Figma user ids). Returns the group with its id.

update_a_figma_scim_group_by_id

Overwrite a SCIM group in Figma (PUT /scim/v2/{tenant}/Groups/{id}): display name, externalId and the full member list. Members added inherit the linked workspace or billing group; members omitted lose it. Required: id, schemas, displayName. Returns the updated group.

figma_scim_groups_partial_update

Change selected attributes or membership of a SCIM group in Figma (PATCH /scim/v2/{tenant}/Groups/{id}, SCIM PatchOp). Example: replace value {"displayName": "New name"}, or add path members value [{"value": ""}]. Required: id (query) and Operations. Returns the updated group.

delete_a_figma_scim_group_by_id

Permanently delete a SCIM group from Figma and the SCIM provisioning log (DELETE /scim/v2/{tenant}/Groups/{id}). Members are not deleted. Required: id. Returns 204 with no body.

list_all_figma_scim_service_provider_config

Get Figma's SCIM service provider configuration (GET /scim/v2/{tenant}/ServiceProviderConfig): which SCIM features are supported (patch yes, filter yes with max 200 results, bulk no, sort no, change password no) and the bearer token authentication scheme. Useful to verify the tenant id and token before provisioning. No parameters.

figma_scim_tenant_validate

Check whether the connected Figma SCIM tenant ID is valid (GET /scim/v2/{tenant_id}). Takes no inputs: the tenant ID and API token come from the connection. A successful (HTTP 200) response means the tenant ID is valid for this token. An error means it is not: 400 when the tenant ID is malformed (it must be numeric), 404 when it is well-formed but unknown or not accessible with this token. Use it as a connection health check before provisioning users or groups.