Create a Mondoo API token

1. In the Mondoo App, create a new API token with edit permission to your Mondoo organization.

2. Copy the generated token and save it. You need it for many of the steps below.

Identify your SCIM base URL

Determine your SCIM base URL using the URL you use to access the Mondoo App: Replace console with api and add /scim/v2. So if your Mondoo App URL is:

https://console.YOUR-COMPANY-NAME.mondoo.com

then your SCIM base URL is:

https://api.YOUR-COMPANY-NAME.mondoo.com/scim/v2

Verify that SCIM is enabled for your Mondoo instance

Confirm that the Mondoo team has successfully enabled SCIM support for your Mondoo Enterprise instance.

• For YOUR-API-TOKEN, substitute the token you created above.

• For YOUR-SCIM-BASE-URL, substitute the SCIM base URL you identified above.

$ TOKEN='YOUR-API-TOKEN'
$ curl -i -X GET -H "authorization: Bearer $TOKEN" YOUR-SCIM-BASE-URL/Users
HTTP/2 200
content-type: application/scim+json
vary: Origin
vary: Accept-Encoding
date: Thu, 16 May 2024 21:09:36 GMT
content-length: 130
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

{"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults":0,"itemsPerPage":0,"startIndex":0,"Resources":[]}

If this test is unsuccessful, contact your Mondoo representative.