---
title: "ezgh sso scim-tokens"
description: "Directory SCIM tokens: how identity providers provision the directory (ezgh_dsc_…)."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh sso scim-tokens

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh sso scim-tokens <command>
```

Directory SCIM tokens are what identity providers authenticate to EZGH SSO's inbound SCIM 2.0 API with (https://sso.ezghcloud.com/scim/v2, Authorization: Bearer ezgh_dsc\_…), to create, update, suspend and remove the directory's users and groups. Each token names the identity provider it provisions for. They're separate from organization SCIM tokens (`ezgh iam scim tokens`), which provision console members. Tokens are given by ID, name or prefix.

Part of [`ezgh sso`](/cli/reference/sso).

## Flags

This command also takes the [global flags](/cli/reference#global-flags).

## Subcommands

| Command | Description |
| --- | --- |
| [`ezgh sso scim-tokens create`](/cli/reference/sso-scim-tokens-create) | Create a SCIM token for an identity provider; the token is shown once |
| [`ezgh sso scim-tokens delete`](/cli/reference/sso-scim-tokens-delete) | Delete a SCIM token, by ID, name or prefix |
| [`ezgh sso scim-tokens list`](/cli/reference/sso-scim-tokens-list) | List the directory's SCIM tokens and the identity provider each provisions for |

Source: https://docs.ezghcloud.com/cli/reference/sso-scim-tokens/index.mdx