Setting up automated provisioning with Google

This guide walks you through configuring automated user provisioning between Google Workspace and your Miro Enterprise account using SCIM.

Available for: Enterprise plan
Set up by: Company-level admin

⚠️ This guide covers configuration steps only. For supported functionality, sync rules, and troubleshooting, see the SCIM overview. For the SCIM API reference, see the developer documentation.

Note: this integration provisions users only. Google Workspace's autoprovisioning for Miro doesn't sync Google groups to Miro user groups or teams. If you also want to sync group membership, use one of Miro's other supported identity providers, or manage user groups directly.

Google also has its own steps on how to configure Miro user provisioning.

Prerequisites

Before you configure automated provisioning, complete the following:

• Set up and confirm that Google SSO is working in your Miro Enterprise plan. See Configure Google SSO for instructions.
• Review Important to know and Rules under which Miro operates in the SCIM overview to avoid connection errors during sync.

Configuration

1. In your Google Workspace Admin Console, go to your Miro app (Apps > Web and mobile apps > Miro).
2. Under Autoprovisioning, click Configure autoprovisioning.
3. To get your Miro access token, log in to your Miro organization (https://miro.com/app/dashboard/), then click your avatar in the top-right corner and click Settings.
4. In Company settings, click Enterprise integrations and toggle on SCIM Provisioning if it isn't already on.
5. Click Copy to copy the API token.
6. Return to your Google Admin Console, paste the token, then click Continue.
7. Confirm that all required values under attribute mapping are mapped to the correct Google attributes. If not, click the down arrow next to the attribute and choose the correct value, then click Continue.
8. To limit provisioning to specific Google groups, enter the group name or names. This scopes which users get provisioned to Miro; it doesn't sync those Google groups as Miro user groups or teams. To provision all users instead, click Continue.
9. Configure any deprovisioning settings you want, then click Finish.
10. In the Autoprovisioning area, click the toggle to set autoprovisioning to Active.

Testing provisioning in Google and Miro

1. In the Google Admin Console, click Directory > Users.
2. Click Add new user.
3. Enter the First name and Last name for the user, then click ADD NEW USER.
4. Click DONE to confirm and add the new user.
5. Refresh your browser. The new user should appear.
6. In Miro, go to Company settings (https://miro.com/app/dashboard/, then click your avatar in the top-right corner and click Settings), then click Active users.
7. You should now see your newly provisioned users:
   
   Adding provisioned users to Google (and Miro)

Troubleshooting

Autoprovisioning stops working

If the admin password for Miro changes, or if there's account inactivity, autoprovisioning can stop working. To keep syncing user accounts from Google Workspace to the app, reauthorize autoprovisioning:

1. In your Google Workspace Admin Console, go to your Miro app (Apps > Web and mobile apps > Miro).
2. Click the Autoprovisioning section, then under App authorization, click REAUTHORIZE.
3. When prompted for an access token, enter the API token from Miro (see steps 3 through 5 in Configuration above).
4. Click Re-authorize.

If you need additional support, see the SCIM overview. For more on editing provisioning settings, turning off autoprovisioning, and deleting configuration information, see Configure Miro user provisioning in the Google Help Center.