User Provisioning API/ App with users Create/read scope

[Thulasi Raman Selvaganapathy]

Hello,

I am trying to create/read/update user in Atlassian using user-provisioning API https://xxxx.atlassian.net/rest/api/3/user?accountId=XXXXXX and using API Key generated via Atlassian administrator console.

However i am getting 401 Unauthorised error. As i searched through the documentation, i need to create an App with users read, write scopes and generate token using client-id, client-secret of this app for generating token and the use it in user provisioning API.

However I am unable to create such app in Atlassian Developer console. It allows me to create only following app (OAuth2 Integration App - which is Authorisation flow for standard web apps) and Forgeapp - which is a cloud based Development platform offering from Atlassian.

Could you please let me know where can i create an app which allows to generate tokens (standard OAuth Client Credentials flow) and use it in my user provisioning APIs to create/read users in Atlassian?

Regards,

Thulasi

[Eugenio Onofre]

Hi @Thulasi Raman Selvaganapathy

Welcome to the Atlassian Community.

You're absolutely on the right track as the User Provisioning API (and most of the SCIM-compatible identity management features) require OAuth 2.0 with Client Credentials flow.

This type of integration can’t be done through the regular Atlassian Developer Console and, instead, you need to create a Managed OAuth 2.0 app in your Atlassian Admin Hub, not the public developer site.

1. Go to: admin.atlassian.com
2. Select your organization
3. In the left sidebar, go to “Settings” > “API integrations”
4. Click “Create API integration”
5. This lets you register a Client ID and Secret
6. Define scopes like read:users / write:users (required for the SCIM APIs)
7. Use the Client Credentials Flow to obtain an access token
8. After obtaining your token from POST https://auth.atlassian.com/oauth/token, use that token in the Authorization: Bearer <token> header to make requests to the provisioning endpoints.

These APIs are available only to enterprise-level organizations using Atlassian Access.

Please remember to vote and accept this answer in case it helps you resolve your query.

Regards,
Eugenio