# Retrieve a SCIM auth token

{% hint style="info" %}
**Who can use this feature?**

* Workspace **Owners**, **Super Admins**, and **Admins**
* Only supported using the Cerby web app
  {% endhint %}

Cerby uses the System for Cross-domain Identity Management (SCIM) specification to configure automatic user and group provisioning between identity providers (IdPs), such as Okta and Entra ID (formerly Azure AD), and the multiple applications that companies use.

By enabling automatic provisioning, Cerby can manage the creation and synchronization of user accounts and teams based on the user and group assignments in your corporate IdP. To configure automatic provisioning and authenticate SCIM provisioning requests, you need a SCIM API authentication token generated by Cerby.

To retrieve the SCIM API authentication token, complete the following steps:

{% hint style="danger" %}
**IMPORTANT:** To view the SCIM API authentication token, you must verify your identity. Therefore, you must have installed and logged in to the Cerby mobile application to receive push notifications.
{% endhint %}

1. Log in to your corresponding [Cerby](https://app.cerby.com/) workspace.
2. Select the **Settings** option from the left navigation drawer. The **Workspace Configuration** page is displayed.
3. Activate the **IdP Settings** tab. The details of your IdP and the **Directory Sync** section are displayed, as shown in **Figure 1**.

   <figure><img src="https://2223875686-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOVedBAAT7J2QEzTS50GO%2Fuploads%2Fgit-blob-e5eae1782c569fd8b2f47836f4234d5256ea7184%2FwYKYXI-5PC3k5vuKXMzolKGy6aI8m6H0DZ_FPcJobn7n_UxFOK-AXCF2TEvS9greX2eTMk-fsysA0J-YMRe1bg_6lL9vbMg8A3brva46_uaXsYB2M14DR5Nfffur6L3T8imunHY7KKqFLx-_mitDX38.png?alt=media" alt=""><figcaption><p>Figure 1. Directory Sync section in the IdP Settings tab</p></figcaption></figure>
4. Click the **View Token** button located in the **Directory Sync** section. The **Confirm your identity to continue** dialog box is displayed, and a push notification is sent to your Cerby mobile app.
5. Confirm your identity by using one of [Cerby's multi-factor authentication methods](https://help.cerby.com/tips-and-troubleshooting/best-practices/set-up-your-identity-with-cerby-s-mfa-methods). The **Confirm your identity to continue** dialog box closes in the Cerby web app, and the **Show Token** dialog box is displayed, as shown in **Figure 2**.

   <figure><img src="https://2223875686-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOVedBAAT7J2QEzTS50GO%2Fuploads%2Fgit-blob-a12234cbf1d781ff5dd425bcd46ad7d6b454bf93%2FiHcagYfTMbx6ZzSg-CSqke7MiO_U7QqlxVH7yM1sHEMdMJ4IJoMhiQkJHITAlkerCtO05shjlIvFnmrxG2CzD9gjXYbXvSGo4_EIzOb_3cgbEcsCVEzWsZHAWXLGVy3U-_OEvpjyCbp2wdYcLeX_VKg.png?alt=media" alt=""><figcaption><p>Figure 2. Show Token dialog box</p></figcaption></figure>
6. Click the **Copy** button to copy the SCIM API authentication token to the clipboard.\
   **TIP:** Keep the **Show Token** dialog box open, as shown in **Figure 2**, to copy the token at any time. You need the token to configure automatic provisioning with your IdP tenant.

Now you’re done.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/setup-and-admin/workspace-identity-federation/retrieve-the-scim-api-authentication-token-from-cerby.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.