Recent SCIM sync activity for the Environment
/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/scim-tokens/activityReturns the most recent SCIM sync activity for the Environment — the latest scim.* audit rows (provision, deprovision, group changes, mapping, and failures), newest first, capped at 20. Each row projects actor, resource, and outcome, lifting a failure detail from metadata so admins can debug pushes without opening the global audit log. The response is an unpaginated { items } array.
Authentication
AuthorizationJWT access token. Never send alongside X-API-Key: a request carrying both is refused.
sso.viewSecurityView SSO connections, domains, and directory sync. Granted through an administrator role in the Admin Workspace; a valid token without it is refused with 403.
Responses
application/json
items *ScimActivityResponseDto[]
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
Errors
When the request can't be completed, the response body includes a stable error code you can branch on.
account.capability_requiredForbiddenThe signed-in user's administrator roles do not grant the capability this endpoint requires.
Ask an account administrator to grant a role carrying the capability named in the Authentication section, then retry.
Returned object
curl -X GET "https://auth.canopy-io.com/portal/v1/accounts/{accountSlug}/applications/{appSlug}/environments/{envSlug}/scim-tokens/activity" \ -H "Authorization: Bearer $CANOPY_TOKEN"
{ "items": [ { "id": "string", "action": "string", "actor_type": "scim", "actor_label": "string", "resource_type": "string", "resource_label": "string", "outcome": "success", "detail": "string", "created_at": "2026-04-20T12:00:00.000Z" } ] }
Tell us how we can improve this guide.