Tableau SCIM API Introduction


Overview

System for Cross-domain Identity Management (SCIM) is an HTTP-based protocol that standardizes the automation of users and groups provisioning for cloud-based applications like Tableau Cloud. Tableau Cloud supports SCIM, enabling identity providers (IdPs) to centrally manage user identities while streamlining the process of managing users and group membership in Tableau Cloud. The IdP uses SCIM to ensure that access is granted and revoked in a timely way and Tableau Cloud is kept in sync with the provisioning assignments in the IdP. This type of integration improves security and reduces the manual work for site admins in Tableau Cloud.

After enabling SAML authentication and SCIM integration with your Tableau Cloud site, you can use the Tableau SCIM APIs to automate users and groups provisioning.

About the SCIM API

With the Tableau SCIM API, you can manage and change user and group resources using HTTP. The SCIM API is a separate service from Tableau Cloud, with its own REST interface.

The methods described in this documentation have been developed using SCIM 2.0 and follow the SCIM standard defined in RFC 7644.

SCIM API Requirements

To use the SCIM API, the following requirements must be met:

  1. Site admin: Be a Tableau Cloud site admin.
  2. SAML authentication: SAML authentication is configured and enabled on the site. For more information, see Enable SAML Authentication on the Site in the Tableau Cloud Help.
  3. SCIM enabled: SCIM capability is enabled on the site. For more information, see Enable SCIM support in the Tableau Cloud Help.