Disable the SCIM Provisioning API

If you no longer need programmatic SCIM access, you can turn off the SCIM Provisioning API to stop all API access and billing.

  1. Sign in to the Microsoft Entra admin center.

  2. In the left navigation, expand ID Governance and select Dashboard.

  3. On the Dashboard page, locate the SCIM Provisioning API tile and select Edit.

  4. In the SCIM Provisioning API pane, select Turn off.

  5. Confirm the action when prompted. After the feature is turned off, all SCIM API calls to the tenant return an error and billing stops.

Verify that the SCIM API is disabled

Use the following steps to validate that the disable operation was successful.

  1. Obtain an app-only access token that previously worked for SCIM API calls.

  2. Send a GET request to any SCIM endpoint. For example, call the user read endpoint:

    GET https://microsoftgraph.chinacloudapi.cn/rp/scim/users/{id}
Authorization: Bearer {token}
Accept: application/json

  3. Confirm that the API returns HTTP 400 Bad Request.

  4. Confirm that the response includes an error message similar to the following:

    No 'scimapiconsumptions' resource found for TenantId: {tenantId}. Please ensure 'SCIM Provisioning API' feature is enabled and only one 'scimapiconsumptions' resource exists.

If you receive this error, the SCIM APIs are now disabled in your tenant.

Next steps

  • Last updated on