Figma SCIM provisioning from Google Workspace

Figma supports SCIM on the Organization and Enterprise plans, together with SAML SSO. In the admin settings you find your tenant ID and generate a SCIM API token. AnySCIM uses them with https://www.figma.com/scim/v2/{tenant_id} to create Figma accounts for people in Google Workspace and deactivate them when they leave.

Requirements

• A Figma Organization or Enterprise plan.
• SAML SSO configured for the organization.
• An organization admin to generate the token.

Get the tenant ID and token

1. In Figma, open the Admin settings for your organization.
2. Go to Settings → Login and provisioning.
3. Copy your Tenant ID from the SAML SSO section.
4. Under SCIM provisioning, generate a SCIM API token and copy it. Figma shows it only once.

Connect Figma in AnySCIM

1. Open Connections → New connection and choose Figma.
2. Replace {tenant_id} in the base URL with your tenant ID.
3. Paste the token and click Test connection.
4. In Scope, select only the people who need Figma, for example your design and product groups, so you don't assign paid seats by accident.
5. Review the dry-run and activate.

How users are synced

• New users in scope get a Figma account in your organization, matched by email.
• Name changes are pushed with PATCH.
• A suspended Google user is sent as active: false, which deactivates the Figma account. Files they own stay in the organization.

FAQ

Does Figma require SSO for SCIM?

Yes. SCIM provisioning in Figma is configured together with SAML SSO, and the tenant ID comes from the SSO settings.

Can I limit Figma to some departments?

Yes. Scope the connection to the relevant Google groups or organizational units; nobody else is provisioned.

Where do I find the Figma tenant ID?

In the organization's admin settings, under Login and provisioning, in the SAML SSO section.