Blog

If an admin on your account has already produced a SCIM token, it will not be feasible to disable their user or convert their user type from admin to non-admin. This constraint exists to avoid SCIM provisioning failure on your account.

This article will elaborate on why it’s impossible to deactivate or change the user type of such an admin and will also guide you in generating a new token. So, let’s dive into it!

Why have this restriction?

If an admin who has generated a SCIM token is either deactivated or their admin rights are revoked, the SCIM token will no longer function since it’s associated with the admin user who created it. If this situation were to occur, the SCIM provisioning on the account would be unsuccessful.

To avoid this type of problem, we have put a restriction in place which disallows the deactivation or modification of the user type of an admin who has generated a SCIM token.

When does this restriction apply?

This limitation will be enforced when attempting to deactivate an admin who has already produced a SCIM token or when trying to convert their user type from admin to non-admin using the user management section.

How to get around this

If you wish to deactivate or change the user type of such an admin, we suggest you adhere to the following steps:

Step 1: Generate a new token and add it to your IDP

To create a fresh SCIM token, navigate to the “Security” tab in the admin section, and access the SCIM category. Then, choose “Generate” to produce the new token, and click “Copy.”

Once you have copied the new token, you can paste it into your identity provider to activate it.

Step 2: Delete the token created by the admin

Once you have entered the newly produced SCIM token into your identity provider, you may remove the old token created by the admin that you intend to deactivate or change to a non-admin.

To achieve this, navigate to the “All tokens” section in the same SCIM category mentioned above to view a list of all SCIM tokens generated on your account. Then, simply click “Delete” next to the token created by the admin that you wish to deactivate or change to a non-admin.

Step 3: Deactivate or change the user type of the admin

After you have removed the former admin’s SCIM token, you can deactivate or change their user type to non-admin. To accomplish this, navigate to the user management section of your account and choose to either modify their user type or deactivate them, as shown below.

That concludes the process! By generating a new token, removing the old one, and deactivating or changing the user type of the relevant admin, you can ensure that your team can access the account without interruptions.

For further questions, please visit our Knowledge Center.  To view the Knowledge Center, click the Home Page icon the top right of your page, then select “Support” and make you way to “Help Center” in the bottom left.  If you have additional questions, please feel free to contact our team by selecting the blue “Contact Us” button.