Who can use this feature
Education (K-12), Government, and Enterprise plans
Organization admins only
Requires SCIM provisioning to be enabled
Organizations using SAML SSO in Okta can use SCIM to automatically assign users to a workspace or billing group in Figma.
To manage membership to workspaces and billing groups using Okta:
- Set up a workspace and billing group
- Create a group in Okta
- Add or unlink a push group from the Figma application
- View SCIM groups in Figma
Groups pushed to Figma via SCIM can be reused across multiple features, including workspace assignments, billing groups, and user groups. Once a group is pushed from Okta, it becomes available anywhere Figma supports SCIM groups.
Note: Before you dive in, you’ll need:
- Administrative access to Okta with the scope to add and update groups and applications
- SCIM provisioning enabled
1. Set up a workspace or billing group
You must create at least one workspace or billing group before setting up the corresponding group in Okta.
2. Create a group in Okta
Note: The name of the group in Okta must match the name of the corresponding workspace or billing group.
- Under Directory > Groups, click Add group and enter a name of the group.
- Click Assign People to add users to the group.
3. Add a push group to the Figma application
Note: For Figma for Government, first configure the Government-specific Okta application using the SAML and provisioning guidance. Then follow the Push Groups steps in this article.
Push groups in Okta let administrators push group membership from Okta to other applications.
Tip: Push groups do not provision user accounts. To assign a user to the Figma application, navigate to Applications > Figma > Assignments.
When you add a push group, Okta will link the push group to any workspace or billing group with a matching name. All users in the push group will be assigned to the associated workspace or billing group once the push group status is active.
Note:
- Make sure you use separate groups for provisioning and group pushing. Using the same group for both app assignments and group push functions is not currently supported in Okta.
- Members of your organization won’t notice when they are assigned to a billing group. If they are assigned to a workspace, the workspace name will automatically appear in their sidebar in the file browser.
- Navigate to Applications > Figma > Push Groups.
- Click Push Groups > Find Groups by name. Type in the name of the group created in the last section and click on the name when it appears. Click Save.
- Locate the newly added group in the Push Groups tab. When the Push Status is set to Active, your push group has successfully pushed to Figma.
Note:
- If a user is included in multiple push groups, the first push group added to the Figma application in Okta takes precedence
- Depending on the group size, the workspace and billing group assignments may take up to 30 minutes
- Group sizes are limited to 5,000 users
Unlink a push group
Unlinking a push group in Okta removes the SCIM group in Figma. All users managed by the push group will be unassigned from their respective workspace or billing group.
- Navigate to Applications > Figma > Push Groups.
- Locate the group you would like to unlink and click Active > Unlink pushed group.
- Select Delete the group in the target app and click Unlink.
4. View SCIM groups in Figma
You can view the members of any SCIM group you’ve created in Figma.
- From the file browser, click Admin in the left sidebar.
- Select the People tab.
- Click the SCIM group filter and select a group to view members of the group.