On the Enterprise Grid, SCIM operations work across the entire organization and not an individual workspaces. A SCIM app can provision, de-provision, and update team members in just one place rather than having to do so across every workspace in an organization.

To achieve this, the OAuth token used for calling SCIM API methods must be obtained by installing the app on the organization and not just a workspace within the organization.

To get a SCIM app working on a grid organization

1. Ensure that the web service that is powering your application is able to handle a standard OAuth 2 flow.

2. Create a new Slack app.

3. In the application settings, select OAuth & Permissions from the left navigation.

4. In the Redirect URLs section, save the URL https://connect-supervisor.cloud.oneidentity.com/v1/consent.
   

5. In the Scopes section, add the admin scope and click Save Changes.

6. In the application settings, select Manage Distribution from the left navigation.

7. In the Share Your App with Other Workspaces section, make sure all four sections have the green check.

8. Click Activate Public Distribution.

9. Collect the Client Id and Client Secret of the app.

10. While configuring this application for consent flow in Starling UI, provide the Client Id and Client Secret.

11. When the consent flow is initiated, the OAuth handshake will install the application on your organization.
    You must be logged in as an owner of your Enterprise Grid organization to install the application

12. Check the dropdown in the upper right corner of the installation screen to make sure you are installing the application on the Enterprise Grid organization, but not on an individual workspace within the organization.

13. Once the app completes the OAuth flow, it will grant an OAuth token that can be used for accessing all of the SCIM API methods for the Slack enterprise organization.