Manage workspaces and billing groups via SCIM in Okta – Figma Learn - Help Center

Who can use this feature

Available on the Enterprise plan in closed beta; please get in touch with our support team to request access

Organizations using SAML SSO in Okta can use SCIM to automatically assign users to a workspace or billing group in Figma.

To manage membership to workspaces and billing groups using Okta:

Set up a workspace and billing group
Create a group in Okta
Add or unlink a push group from the Figma application
View SCIM groups in Figma

Note: Before you dive in, you’ll need:

Administrative access to Okta with the scope to add and update groups and applications
SCIM provisioning enabled

1. Set up a workspace or billing group

You must create at least one workspace or billing group before setting up the corresponding group in Okta.

2. Create a group in Okta

Note: The name of the group in Okta must match the name of the corresponding workspace or billing group.

CleanShot 2024-08-08 at 16.56.23.png

Under Directory > Groups, click Add group and enter a name of the group.
Click Assign People to add users to the group.

3. Add a push group to the Figma application

Push groups in Okta let administrators push group membership from Okta to other applications.

Tip: Push groups do not provision user accounts. To assign a user to the Figma application, navigate to Applications > Figma > Assignments.

CleanShot 2024-08-08 at 16.52.57.png

When you add a push group, Okta will link the push group to any workspace or billing group with a matching name. All users in the push group will be assigned to the associated workspace or billing group once the push group status is active.

Note: Members of your organization won’t notice when they are assigned to a billing group. If they are assigned to a workspace, the workspace name will automatically appear in their sidebar in the file browser.

Navigate to Applications > Figma > Push Groups.
Click Push Groups > Find Groups by name. Type in the name of the group created in the last section and click on the name when it appears. Click Save.
Locate the newly added group in the Push Groups tab. When the Push Status is set to Active, your push group has successfully pushed to Figma.

Note:

If a user is included in multiple push groups, the first push group added to the Figma application in Okta takes precedence
Depending on the group size, the workspace and billing group assignments may take up to 30 minutes
Group sizes are limited to 5,000 users

Unlink a push group

Unlinking a push group in Okta removes the SCIM group in Figma. All users managed by the push group will be unassigned from their respective workspace or billing group.

Navigate to Applications > Figma > Push Groups.
Locate the group you would like to unlink and click Active > Unlink pushed group.
Select Delete the group in the target app and click Unlink.

CleanShot 2024-08-08 at 17.25.47.png

4. View SCIM groups in Figma

You can view the members of any SCIM group you’ve created in Figma.

From the file browser, click Admin in the left sidebar.
Select the Members tab.
Click the SCIM group filter and select a group to view members of the group.