Get inspired at ContentCon. Learn more and register today
Get inspired at ContentCon. Learn more and register today
Contentstack.comAcademyLogin
CS-log-dark.svgCS-log-dark.svg
  • Changelog
  • APIs
  • SDKs

Platform

  • Solution Center
  • Marketplace
  • Changelog
  • Developers & IT
  • Business users
  • Digital leaders
  • Developer Fast Track
  • Plans & Pricing

Solutions

  • Retail
  • Travel and tourism
  • Financial services
  • Technology
  • Manufacturing
  • E-commerce
  • Localization
  • Personalization
  • Portals and knowledge bases

Resources

  • Academy
  • Docs
  • Product updates
  • Contentstack on Contentstack
  • Blog
  • Insights and analyst reports
  • Webinars
  • Podcasts
  • Glossary
  • Content generative library
  • Community
  • Headless CMS
  • Composable AXP
  • Personalization
  • CDP

Customers

  • Case Studies
  • Customer Care
  • Contentstack Experience Awards
  • Customer support

Partners

  • Overview
  • Find a partner
  • Login

Company

  • About us
  • News
  • Customer support portal
  • Contact

Social

  • Facebook
  • LinkedIn
  • Instagram
  • GitHub
  • YouTube
  • Discord
  • X
LegalTermsPrivacyTrust Center

Cookie settings

Copyright © 2026 Contentstack Inc. All rights reserved.
/
  1. Home
  2. APIs
  3. System for Cross-domain Identity Management (SCIM)
  4. Users

Users

markdownView as Markdown

Use the SCIM API requests to provision, deprovison, and perform other operations on users.

Provision User into Organization

POSThttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users

The Provision User into Organization request adds the user to a Contentstack organization.

If the user does not already exist in Contentstack, you can add the new user to the organization by using this request.

Sample Request
12345678
{
  "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
  "userName": "email_of_user",
  "name": {
    "familyName": "last_name",
    "givenName": "first_name"
  }
}
Sample Response
Status|200 OK
12345678910111213141516171819202122232425
{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
    ],
    "id": "blta********",
    "userName": "[email protected]",
    "name": {
        "givenName": "firstname",
        "familyName": "lastname"
    },
    "active": true,
    "emails": [
        {
            "value": "[email protected]",
            "type": "work",
            "primary": true
        }
    ],
    "meta": {
        "resourceType": "User",
        "created": "2021-02-05T07:44:33.272Z",
        "lastModified": "2021-02-05T07:45:41.301Z",
        "location": "https://auth-api.contentstack.com/scim/v2.0/organizations/blt********/Users/blta*******"
    }
}

Get All Users

GEThttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users

The Get All Users request fetches the list of all users (along with details such as name, user ID, and email address) of your Contentstack organization.

Sample Response
Status|200 OK
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960
{
    "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:ListResponse"
    ],
    "totalResults": 17,
    "startIndex": 2,
    "itemsPerPage": 2,
    "Resources": [
        {
            "schemas": [
                "urn:ietf:params:scim:schemas:core:2.0:User"
            ],
            "id": "bl*********",
            "userName": "[email protected]",
            "name": {
                "givenName": "firstname",
                "familyName": "lastname"
            },
            "active": true,
            "emails": [
                {
                    "value": "[email protected]",
                    "type": "work",
                    "primary": true
                }
            ],
            "meta": {
                "resourceType": "User",
                "created": "2018-01-10T09:54:44.800Z",
                "lastModified": "2021-02-08T11:06:02.058Z",
                "location": "https://auth-api.contentstack.com/scim/v2.0/organizations/blt*******/Users/blt*******"
            }
        },
        {
            "schemas": [
                "urn:ietf:params:scim:schemas:core:2.0:User"
            ],
            "id": "blta3*********",
            "userName": "[email protected]",
            "name": {
                "givenName": "firstname3",
                "familyName": "lastname3"
            },
            "active": true,
            "emails": [
                {
                    "value": "[email protected]",
                    "type": "work",
                    "primary": true
                }
            ],
            "meta": {
                "resourceType": "User",
                "created": "2018-08-14T06:18:34.231Z",
                "lastModified": "2021-01-28T06:10:33.971Z",
                "location": "https://auth-api.contentstack.com/scim/v2.0/organizations/blt*********/Users/blta3*********"
            }
        }
    ]
}

Get Single User By ID

GEThttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users/{user_id}

The Get Single User by ID request returns comprehensive information of a specific user that exists in the organization.

You need to pass the ID of the user as the URL parameter.

Sample Response
Status|200 OK
12345678910111213141516171819202122232425
{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
    ],
    "id": "blt**********",
    "userName": "[email protected]",
    "name": {
        "givenName": "firstname",
        "familyName": "lastname"
    },
    "active": true,
    "emails": [
        {
            "value": "[email protected]",
            "type": "work",
            "primary": true
        }
    ],
    "meta": {
        "resourceType": "User",
        "created": "2018-01-10T09:54:44.800Z",
        "lastModified": "2021-02-08T11:06:02.058Z",
        "location": "https://auth-api.contentstack.com/scim/v2.0/organizations/blt**********/Users/blt**********"
    }
}

Get Single User By Username

GEThttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users?filter=userName eq "<<email-address>>"

The Get Single User by Username request returns comprehensive details of a specific user that exists in the Contentstack organization.

You need to pass the username as a query parameter.

Sample Response
Status|200 OK
1234567891011121314151617181920212223242526272829303132333435
{
    "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:ListResponse"
    ],
    "totalResults": 1,
    "startIndex": 1,
    "itemsPerPage": 100,
    "Resources": [
        {
            "schemas": [
                "urn:ietf:params:scim:schemas:core:2.0:User"
            ],
            "id": "bltfa*********",
            "userName": "[email protected]",
            "name": {
                "givenName": "User",
                "familyName": "Name"
            },
            "active": true,
            "emails": [
                {
                    "value": "[email protected]",
                    "type": "work",
                    "primary": true
                }
            ],
            "meta": {
                "resourceType": "User",
                "created": "2020-09-30T13:34:40.878Z",
                "lastModified": "2021-01-27T09:59:35.782Z",
                "location": "https://auth-api.contentstack.com/scim/v2.0/organizations/blt56********/Users/bltfa*********"
            }
        }
    ]
}

Update User By ID (PUT)

PUThttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users/{user_id}

The Update User Using PUT request lets you update the details of a specific user by using the PUT request type.

In the “Body” section, you need to provide the updated schema of the user in the JSON format.

NoteAs no user attributes, like name and email, are liable to change, this endpoint is currently provided for identity provider compatibility. Set the active flag to “False” to deprovision a user.

Sample Request
123
{
  "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
  "userName": "
Sample Response
Status|200 OK
123456
{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
    ],
    "id": "blt***********",
    "userName": "

Update User By ID (PATCH)

PATCHhttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users/{user_id}

The Update User Using PATCH request lets you update the details of a specific user by using the PATCH request type.

In the “Body” section, you need to provide the updated schema of the user in JSON format.

NoteAs no user attributes, like name and email, are liable to change, this endpoint is currently provided for identity provider compatibility. You can deprovision a user by sending the 'Replace' operation to the path 'active' with the value 'false'.

Sample Request
1234567891011
{
	"schemas": [
		"urn:ietf:params:scim:api:messages:2.0:PatchOp"
	],
	"Operations": [{
		"op": "Replace",
		"path": "active",
		"value": false
	}]

}
Sample Response
Status|200 OK
123456
{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
    ],
    "id": "blt6b9c8c1164bf8e6c",
    "userName": "

Deprovision User

DELETEhttps://auth-api.contentstack.com/scim/v2.0/organizations/{organization_uid}/Users/{user_id}

The Deprovision User request lets you remove a user from a Contentstack organization.

This will remove the user from all the assigned stacks, but the user will continue to have a Contentstack account.

Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid

Headers

Content-Typerequiredstring

The format of the response content.

Example:

application/json
Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client
Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid

Query Parameters

countoptionalstring

To fetch a certain number of users in a single request. You can fetch a maximum of 100 users at a time.

Example:

2
startIndexoptionalstring

It is the index number from which you want to fetch user details.

By default, the value is 1. Example: If you specify 2, you will get details starting from the second user in the list.

Example:

2

Headers

Content-Typerequiredstring

The format of the response content.

Example:

application/json
Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client
Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid
user_idrequiredstring

The ID of the user whose details you want to fetch. Refer to the Get All Users request to get the user ID.

Example:

id_of_user

Headers

Content-Typerequiredstring

The format of the response content.

Example:

application/json
Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client
Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid

Query Parameters

filterrequiredstring

Specify the type of filter you want to use. In this case, the filter will be “userName eq”

Example:

userName eq "[email protected]"

Headers

Content-Typerequiredstring

The format of the response content.

Example:

application/json
Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client
Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid
user_idrequiredstring

The ID of the user whose details you want to update. Refer to the Get All Users request to get the user ID.

Example:

id_of_user

Headers

Content-Typerequiredstring

The format of the response content.

Example:

application/json
Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client
Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid
user_idrequiredstring

The ID of the user whose details you want to update. Refer to the Get All Users request to get the user ID.

Example:

id_of_user

Headers

Content-Typerequiredstring

The format of the response content.

Example:

application/json
Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client
Hide Parameters

URL Parameters

organization_uidrequiredstring

The UID of the organization. Use the Get All Organizations request to get the UID of the organization.

Example:

your_organization_uid
user_idrequiredstring

The ID of the user you want to remove. Refer to the Get All Users request to get the user ID.

Example:

id_of_user

Headers

Authorizationrequiredstring

The access token obtained after authorizing the IdP client.

Example:

Bearer access_token_from_IdP_client