---
page_title: "ona_scim_configuration Resource - ona"
subcategory: "Organization"
description: |-
  Ona SCIM provisioning configuration for the organization associated with the configured provider token. This resource does not expose the one-time SCIM bearer token in Terraform state.
---

# ona_scim_configuration (Resource)

Ona SCIM provisioning configuration for the organization associated with the configured provider token. This resource does not expose the one-time SCIM bearer token in Terraform state.

For product context, see [SCIM Provisioning](https://ona.com/docs/ona/scim/overview) and [Restrict account creation to SCIM](https://ona.com/docs/ona/organizations/policies/scim-account-restriction).

## Example Usage

```terraform
resource "ona_scim_configuration" "corp" {
  sso_configuration_id = ona_sso_configuration.corp.id
  name                 = "Acme SCIM"
  enabled              = true

  token_expires_in = "8760h"

  allow_unverified_email_account_linking = false
}
```

<!-- schema generated by tfplugindocs -->
## Schema

### Required

- `sso_configuration_id` (String) SSO configuration ID linked to SCIM provisioning.

### Optional

- `allow_unverified_email_account_linking` (Boolean) Whether SCIM may link provisioned users to existing accounts when the identity provider does not mark email addresses as verified.
- `enabled` (Boolean) Whether SCIM provisioning is active.
- `name` (String) Human-readable SCIM configuration name.
- `token_expires_in` (String) Initial SCIM token lifetime using a number followed by a time unit, such as `24h` or `8760h`. Minimum is `24h`; maximum is `17520h`. Changing this value replaces the resource.

### Read-Only

- `created_at` (String) RFC3339 timestamp when the SCIM configuration was created.
- `id` (String) SCIM configuration ID.
- `token_expires_at` (String) RFC3339 timestamp when the current SCIM token expires.

## Import

Import is supported using the following syntax:

The [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import) can be used, for example:

```shell
#!/usr/bin/env sh

terraform import ona_scim_configuration.corp 01980ed3-a090-7b5b-a74c-9bf5d8cfe53c
```