HRIS · Beta
Lattice SCIM
API integration
Ship HRIS features without building the integration. Full Lattice SCIM API access via Proxy and 9 MCP-ready tools for AI agents — extend models and mappings to fit your product.
Built for specific customer use cases. Issues are resolved quickly.
Talk to usUse Cases
Why integrate with Lattice SCIM
Common scenarios for SaaS companies building Lattice SCIM integrations for their customers.
Automate Day-1 Employee Provisioning into Lattice
HRIS, payroll, and EOR platforms can offer customers zero-touch onboarding by automatically creating Lattice user accounts the moment an employee is hired, eliminating manual setup for HR admins.
Keep Lattice Org Charts in Continuous Sync
Platforms that manage org structure, hierarchies, or role changes can push manager, department, and title updates into Lattice so performance review cycles always reflect the current reporting lines.
Instant Offboarding and License Reclamation
SaaS management and IT automation tools can deactivate or delete Lattice users the moment an employee leaves, securing sensitive review data and freeing up paid seats without manual IT tickets.
Directory Reconciliation and Access Audits
IAM platforms and security tools can pull the full Lattice user list to reconcile against their own directory, flagging orphaned accounts, dormant users, or unauthorized access.
Ship a SCIM Connector Without Building One
Identity providers and workforce platforms can add Lattice to their catalogue of SCIM-supported apps in days, using Truto to handle SCIM 2.0 semantics, auth, and schema discovery.
What You Can Build
Ship these features with Truto + Lattice SCIM
Concrete product features your team can ship faster by leveraging Truto’s Lattice SCIM integration instead of building from scratch.
Automated user provisioning workflows
Create Lattice users programmatically from your onboarding flow using the SCIM create user endpoint, mapping your internal employee record to Lattice's userName and profile attributes.
Manager and org-structure sync
Use partial update (PATCH) to push manager, department, and title changes into Lattice's enterprise user extension so performance reviews route to the correct reviewers.
One-click deactivation and offboarding
Deactivate users by patching the active flag to false, or fully remove them via the delete endpoint when an employee is terminated in your system.
Lattice user directory sync
List all Lattice users with SCIM filter expressions to maintain a mirrored copy of the workforce in your platform for reporting, audits, or cross-app reconciliation.
Schema-aware attribute mapping UI
Use the SCIM schemas and resource types endpoints to dynamically render attribute mapping interfaces for your customers, so they can map custom fields to Lattice without you hardcoding them.
Capability-driven integration setup
Query the service provider config endpoint to detect which SCIM operations Lattice supports (PATCH, filtering, bulk) and adapt your sync engine accordingly for reliable provisioning.
SuperAI
Lattice SCIM AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_lattice_scim_users
List Lattice SCIM users with optional SCIM filter expressions. Returns each user with id, userName, displayName, active, name, emails, title, timezone, meta, and enterprise/lattice extension attributes.
create_a_lattice_scim_user
Create a new Lattice SCIM user. Returns the created user object including id, userName, displayName, active, name, emails, title, timezone, and meta. Required: userName (work email in valid email format).
get_single_lattice_scim_user_by_id
Get a single Lattice SCIM user by id. Returns the full user resource including id, userName, displayName, active, name, emails, title, timezone, meta, and enterprise/lattice extension attributes. Required: id.
update_a_lattice_scim_user_by_id
Replace a Lattice SCIM user by id. Returns the updated user object including id, userName, displayName, active, name, emails, title, timezone, and meta. Required: id, userName (work email).
delete_a_lattice_scim_user_by_id
Delete or deprovision a Lattice SCIM user by id. Returns an empty 204 response on success. Required: id.
lattice_scim_users_partial_update
Partially update a Lattice SCIM user by id. Used to activate or deactivate users by setting the active field, and to update syncable attributes like name, title, timezone, department, manager, startDate, birthDate, and gender. Returns: schemas, id, externalId, name, displayName, nickName, userName, profileUrl, title, timezone, active, emails, phoneNumbers, photos, groups, meta,…
list_all_lattice_scim_schemas
List Lattice SCIM schema definitions available for user provisioning. Returns 6 schemas including the core User, enterprise extension, and Lattice custom attributes schemas. Returns: id, name, description, attributes, meta.
list_all_lattice_scim_service_provider_config
Get the Lattice SCIM ServiceProviderConfig describing which SCIM features the service provider supports. Returns: patch, bulk, filter, sort, changePassword, etag, authenticationSchemes.
list_all_lattice_scim_resource_types
List the SCIM resource types available in Lattice. Returns: id, name, endpoint, schema, schemaExtensions.
Why Truto
Why use Truto’s MCP server for Lattice SCIM
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 650+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
How It Works
From zero to integrated
Go live with Lattice SCIM in under an hour. No boilerplate, no maintenance burden.
Link your customer’s Lattice SCIM account
Use Truto’s frontend SDK to connect your customer’s Lattice SCIM account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call Lattice SCIM
Truto’s Proxy API is a 1-to-1 mapping of the Lattice SCIM API. You call us, we call Lattice SCIM, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate Lattice SCIM’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about Lattice SCIM on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
How does authentication work for Lattice SCIM?
Lattice SCIM uses bearer token authentication issued from the customer's Lattice admin settings. Truto handles token storage, injection, and refresh so you don't have to manage credentials per customer.
What user operations are supported?
Truto exposes full lifecycle operations on Lattice users: list, get by ID, create, full update (PUT), partial update (PATCH), and delete — covering the complete SCIM 2.0 user resource surface.
Can I sync custom or enterprise attributes like manager and department?
Yes. Lattice supports the SCIM enterprise user extension, so you can push attributes like manager, department, title, and employeeNumber via the partial update endpoint. Use the schemas endpoint to discover the exact attribute paths.
How do I discover which SCIM features Lattice supports?
Use list_all_lattice_scim_service_provider_config to inspect supported operations (PATCH, filter, bulk, sort, etag), and list_all_lattice_scim_schemas and list_all_lattice_scim_resource_types to introspect the User schema and any extensions.
How fresh is the data pushed into Lattice?
SCIM operations are synchronous. When you create, update, or deactivate a user via Truto, the change is reflected in Lattice immediately upon a successful API response — no polling or batch delay.
Can I filter users when listing them?
Yes. Lattice SCIM supports standard SCIM filter expressions (e.g., filtering by userName, active status, or email) on the list users endpoint, which is useful for reconciliation and targeted audits.
What's the difference between deleting a user and setting active to false?
Setting active to false via partial update deactivates the user in Lattice while preserving their historical data (useful for review history). Delete removes the SCIM user resource entirely. Most integrations prefer deactivation for offboarding.
Lattice SCIM
Get Lattice SCIM integrated into your app
Our team understands what it takes to make a Lattice SCIM integration successful. A short, crisp 30 minute call with folks who understand the problem.