# Figma SCIM provisioning from Google Workspace

> Provision Figma users from Google Workspace with SCIM on the Organization or Enterprise plan. Tenant ID, SCIM API token and AnySCIM setup.

**Figma supports SCIM on the Organization and Enterprise plans, together with SAML SSO.** In the admin settings you find your tenant ID and generate a SCIM API token. AnySCIM uses them with `https://www.figma.com/scim/v2/{tenant_id}` to create Figma accounts for people in Google Workspace and deactivate them when they leave.

## Requirements

- A **Figma Organization** or **Enterprise** plan.
- **SAML SSO** configured for the organization.
- An **organization admin** to generate the token.

## Get the tenant ID and token

1. In Figma, open the **Admin** settings for your organization.
2. Go to **Settings → Login and provisioning**.
3. Copy your **Tenant ID** from the SAML SSO section.
4. Under **SCIM provisioning**, generate a **SCIM API token** and copy it. Figma shows it only once.

## Connect Figma in AnySCIM

1. Open **Connections → New connection** and choose **Figma**.
2. Replace `{tenant_id}` in the base URL with your tenant ID.
3. Paste the token and click **Test connection**.
4. In **Scope**, select only the people who need Figma, for example your design and product groups, so you don't assign paid seats by accident.
5. Review the dry-run and activate.

## How users are synced

- New users in scope get a Figma account in your organization, matched by email.
- Name changes are pushed with `PATCH`.
- A suspended Google user is sent as `active: false`, which deactivates the Figma account. Files they own stay in the organization.

> **Seats:** provisioning creates the account. Paid seat type is managed in Figma's admin settings, so check your seat policy before the first large sync.

## FAQ

### Does Figma require SSO for SCIM?

Yes. SCIM provisioning in Figma is configured together with SAML SSO, and the tenant ID comes from the SSO settings.

### Can I limit Figma to some departments?

Yes. Scope the connection to the relevant Google groups or organizational units; nobody else is provisioned.

### Where do I find the Figma tenant ID?

In the organization's admin settings, under **Login and provisioning**, in the SAML SSO section.