Set up SCIM API authentication in Demandbase to allow your identity provider to send user provisioning requests through SCIM APIs. This article explains how to generate Demandbase credentials and identifies the settings needed by your identity provider.
Prerequisites to Set Up SCIM API Authentication
- You must have admin access in Demandbase.
- You must have admin access in your identity provider to complete its SCIM connection settings.
- You must create a Demandbase role to assign to provisioned users. See Create and Manage Roles in Demandbase for Marketing.
Generate API Credentials in Demandbase
Create an API key set to generate a Client ID and Client Secret for OAuth 2.0 authentication.
See Generate and Manage API Key Sets.
Identify SCIM Connection Settings
Use the following settings when setting up a compatible identity provider. The SCIM connector base URL and OAuth token endpoint must correspond to your Demandbase environment.
| Setting | Value |
| SCIM connector base URL |
Demandbase SCIM endpoint for your environment; format: <domain>/scim/v2/ Important: The SCIM base URL must not contain underscores (_). |
| Unique identifier field for users | userName |
| Supported provisioning actions | Create, update, and de-provision users |
| Authentication mode | OAuth 2.0 |
| Grant type | Client Credentials |
| Access token endpoint URI | Demandbase OAuth token endpoint for your environment |
| Client ID | Client ID generated in Demandbase |
| Client Secret | Client Secret generated in Demandbase |
Important: Do not use staging URLs for a production connection. Confirm the correct production SCIM and OAuth endpoints with Demandbase.
Set Up SCIM in Your Identity Provider
Enter the Demandbase connection settings in your identity provider. For provider-specific procedures, refer to the following articles:
- Okta: Add SCIM provisioning to app integrations.
- Microsoft Entra ID: Tutorial: Develop and plan provisioning for a SCIM endpoint in Microsoft Entra ID.
Important: The settings above describe the OAuth 2.0 client credentials configuration documented for Okta. Verify that your identity provider supports this authentication method and the required provisioning actions.
Next Steps after Setting Up SCIM API Authentication
After setting up SCIM API authentication, set up SCIM provisioning workflows in Demandbase to assign user roles based on SCIM group membership.