Steps

In Salesforce

For Salesforce SCIM on the Salesforce side:

1. Create Salesforce User with an assigned license that allows for App Permissions

2. Create and/or assign a profile or permission set that includes at least the following permissions:

   1. API Enabled

   2. Manage Users

   3. Manage Internal Users (if present)

   4. View Setup and Configuration

3. Expand external client apps settings and confirmed that Allow creation of connected apps is checked off.

   

4. Setup → Apps → App Manager → New External Client App

5. Under API (Enable OAuth Settings):

   1. Make sure Enable OAuth Settings is on

   2. Make sure Enable Client Credentials Flow is checked

   3. In Selected OAuth Scopes, add “Manage user data via APIs (api)” (sometimes shown as “Access and manage your data (api)”) 

   4. Best practice for this flow: keep scopes minimal (often API-only)

6. Manage Connected Apps → Edit Created App

   1. Check box for Enable User Provisioning

   2. Add created user from step 1 to the Run As under Client Credentials Flow

7. Obtain the OAuth Client ID and Secret

   1. Navigate to App Manager

   2. Find the app that you created

   3. Click "Choose view" -> Manage consumer details

In YeshID