# Confirmation needed on SCIM2 and OAuth/JWT **URL:** \ **Category:** API and Webhooks\ **Created:** [April 14, 2020, 5:22pm UTC](https://devforum.zoom.us/t/confirmation-needed-on-scim2-and-oauth-jwt/13149 "2020-04-14T17:22:35Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![pvdh](https://avatars.discourse-cdn.com/v4/letter/p/c2a13f/32.png) [@pvdh](https://devforum.zoom.us/u/pvdh)\ **Post date:** [April 14, 2020, 5:22pm UTC](https://devforum.zoom.us/t/confirmation-needed-on-scim2-and-oauth-jwt/13149/1 "2020-04-14T17:22:35Z")
Hi all, I’m tasked with connecting zoom to our local IDM system, based on foregerock idm. SSO based on Shibboleth took 30 minutes, but SCIM seems to be a lost cause. The way I see it: zoom offers OAuth, but only for user access using the authorization code grant, which is not what should be used for IDM integration. Technically, client credentials would be a better alternative, but is unsupported by zoom. Zoom expects the use of JWT-based authentication for my use case. Forgerock offers OAuth-integration (using client credentials) or basic authentication to connect to zoom via SCIM. So I don’t see a way to integrate both products and since the SCIM standards seem to be very abstract about authentication (“use good one…”), I can’t even blame either side. Am I missing any options? Will probably try to get an API gateway like gravetee to translate… Best regards Patrick ---
**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\ **Post date:** [April 15, 2020, 3:46am UTC](https://devforum.zoom.us/t/confirmation-needed-on-scim2-and-oauth-jwt/13149/2 "2020-04-15T03:46:10Z")
Hi @pvdh, I am not aware that we require JWT for SCIM; are there error codes you’re getting which shows this? To make these requests with OAuth, create an Account-level OAuth App and add the SCIM2 scope to the app. This app will then need to be installed and used by an admin or account user with Single Sign-On edit permissions. Account-level OAuth Scopes: ![Screen Shot 2020-04-14 at 9.41.51 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/8/8c5596c80ba2e4fc6239e19ed099693731df49df.png) Required User permission, set by an Admin (with Role Management permissions): ![Screen Shot 2020-04-14 at 9.44.47 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/2/24c5e22cbc1a6a1d179f5b042dad54dc75e51ee9.png) ---
**Author:** ![pvdh](https://avatars.discourse-cdn.com/v4/letter/p/c2a13f/32.png) [@pvdh](https://devforum.zoom.us/u/pvdh)\ **Post date:** [April 15, 2020, 7:45am UTC](https://devforum.zoom.us/t/confirmation-needed-on-scim2-and-oauth-jwt/13149/3 "2020-04-15T07:45:28Z")
Hi Michael, you are missing “The way I see it: zoom offers OAuth, but only for user access using the authorization code grant, which is not what should be used for IDM integration. Technically, client credentials would be a better alternative, but is unsupported by zoom.” I got zoom and SCIM working with OAuth2, but the way I see it that’s unsuitable for server2server-integration, therefore JWT seems to be the only viable option. Best regards Patrick ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 16, 2020, 5:21am UTC](https://devforum.zoom.us/t/confirmation-needed-on-scim2-and-oauth-jwt/13149/4 "2020-04-16T05:21:04Z")
Hey @pvdh, Correct, for searver2server use [Zoom JWT Tokens.](https://marketplace.zoom.us/docs/guides/auth/jwt) Thanks, Tommy ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 8:30pm UTC](https://devforum.zoom.us/t/confirmation-needed-on-scim2-and-oauth-jwt/13149/5 "2020-08-21T20:30:45Z")
Closed on August 21, 2020, 8:30pm UTC