Documentationbreadcrumb arrow Grafana documentationbreadcrumb arrow Set upbreadcrumb arrow Configure access managementbreadcrumb arrow Configure SCIM provisioningbreadcrumb arrow Troubleshoot SCIM
Grafana Cloud Enterprise RSS

Troubleshoot SCIM provisioning

This page provides solutions for common issues you might encounter when configuring and using SCIM provisioning in Grafana.

User provisioning issues

Error: “invalid namespace”

Cause: The SCIM endpoint URL is incorrectly formatted.

Solution: Verify your URL follows the correct format:

Bash 
https://{$GRAFANA_URL}/apis/scim.grafana.app/v0alpha1/namespaces/{$STACK_ID}/Users

Where:

  • {$GRAFANA_URL} is your Grafana URL (subdomain format)
  • {$STACK_ID} is your Grafana stack ID:
    • Grafana Cloud: Format like stack-123 (found in your Grafana Cloud dashboard)
    • On-premises: Use default or the name of the organization

Authentication issues

Error: “HTTP 403 Forbidden”

Cause: Either incorrect token or insufficient permissions.

Solution:

  1. Check token: Generate a new token from the Service Account details page
  2. Verify permissions: Ensure the service account has Editor or Admin role in the Grafana instance

Error: “HTTP 401 Unauthorized”

Cause: Invalid or expired authentication token.

Solution: Generate a new token from the Service Account details page in Grafana.

Login issues

Error: “User sync failed”

Cause: The user’s unique identifier field is not correctly configured in SAML assertions.

Solution: Add the required SAML assertion based on your identity provider:

SAML AssertionIdentity ProviderValue
userUIDEntra IDobjectId
userUIDOktauser.getInternalProperty("id")

Next steps