# Linear SCIM provisioning from Google Workspace

> Provision Linear workspace members from Google Workspace with SCIM on the Enterprise plan. Enabling SCIM, finding the base URL and token, and AnySCIM setup.

**Linear supports SCIM on the Enterprise plan for workspaces that use SAML SSO.** Once SCIM is enabled for your workspace, Linear shows a base URL and a bearer token under **Settings → Security**. Paste both into AnySCIM to add members from Google Workspace and deactivate people who leave.

## Requirements

- A **Linear Enterprise** workspace with **SAML SSO** enabled.
- SCIM enabled for the workspace. If you don't see the SCIM option, contact Linear to turn it on.
- A workspace **admin**.

## Get the base URL and token

1. In Linear, open **Settings → Security**.
2. Turn on **SCIM** and click **View configuration**.
3. Copy the **base URL** and the **bearer token** exactly as shown.

## Connect Linear in AnySCIM

1. Open **Connections → New connection** and choose **Linear**.
2. Replace the pre-filled base URL with the one shown in Linear's configuration, if it differs.
3. Paste the token (it starts with `lin_scim_` in the template hint) and click **Test connection**.
4. In **Scope**, select the groups that use Linear, typically engineering, product and design. Turn on **Push group membership** if you want the groups in Linear too.
5. Review the dry-run and activate.

## How users are synced

- New users in scope become members of the Linear workspace, matched by email.
- Name changes are pushed with `PATCH`.
- A suspended Google user is sent as `active: false`, which deactivates the Linear member. Issues and comments they created stay in place.

## FAQ

### Which Linear plan includes SCIM?

Enterprise, with SAML SSO enabled. SCIM may need to be enabled by Linear for your workspace before the option appears in **Settings → Security**.

### Where are the Linear SCIM base URL and token?

In **Settings → Security**, after turning on SCIM, under **View configuration**.

### Does SCIM replace Linear's SAML SSO?

No. SAML SSO handles sign-in; SCIM keeps the member list in sync with Google Workspace. Linear requires both.