---
title: "Create user"
method: POST
path: "/scim/Users"
tags: ["SCIM"]
---

# Create user

`POST /scim/Users`

Provisions a new user into the authenticated organization using the SCIM `urn:ietf:params:scim:schemas:core:2.0:User` schema.

If a user with the same `userName` or primary email already exists in another organization within the same customer group (SSO-linked), the user is added to this organization instead of being created.

## Request body

- ScimUserRequest — SCIM User resource for create and update (PUT) operations
  - `schemas` string[] — SCIM schema URNs
  - `externalId` string — Identifier assigned by the provisioning client (IdP)
  - `userName` string, required — Unique username within the Phrase Platform. Required for create; optional for replace if unchanged.
  - `name` ScimName — User's name components
    - `givenName` string — First name
    - `familyName` string — Last name
  - `emails` ScimEmail[], required — List of email addresses. Must include at least one entry. The primary email is derived from the entry with `primary: true`, or the first entry if none is marked primary.
    - `value` string, email — Email address
    - `primary` boolean — Whether this is the user's primary email address
  - `active` boolean — Whether the user account should be enabled. **Ignored on create** — newly provisioned users are always active regardless of this value.
  - `locale` string — User locale in IETF BCP 47 format (e.g. `en-US`). Falls back to the organization default when not provided or when the value does not match a supported locale.
  - `timezone` string — User time zone in IANA Time Zone Database format (e.g. `Europe/Berlin`). Falls back to the organization default when not provided or when the value is not a recognized IANA timezone.
  - `roles` unknown

## Response `201`

User created successfully

## Other responses

- `400` — Bad request — validation error or malformed body
- `401` — Unauthorized — missing or invalid token
- `409` — Conflict — `userName` already in use
- `422` — Unprocessable entity — business rule violation (e.g. duplicate email, invalid locale or timezone)
- `500` — Internal server error

---

[API](https://skmtc.net/phrase/apis/control-hub-service.md) · [All operations](https://skmtc.net/phrase/apis/control-hub-service/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/phrase/control-hub-service/revisions/98ecac7ba2bf/schema)