Stitchflow
LeadIQ logo

LeadIQ User Management API Guide

API workflow

How to automate user lifecycle operations through APIs with caveats that matter in production.

UpdatedMar 11, 2026

Summary and recommendation

LeadIQ does not publish a public REST API for user management. There is no documented base URL, authentication token scope, or endpoint reference available in official sources. The only supported mechanism for automated user lifecycle management is SCIM 2.0, provisioned exclusively through Okta, and gated behind both an Enterprise plan and a $4,800/year SSO add-on.

The SCIM bearer token and tenant endpoint URL are generated inside the LeadIQ admin UI and are not retrievable programmatically. Supported SCIM operations are limited to Create user and Deactivate user; attribute mappings and supported schemas are not publicly published. No webhooks are available and no alternative event-driven mechanism is documented.

API quick reference

Has user APINo
SCIM availableYes
SCIM plan requiredEnterprise (SCIM is an add-on; SSO prerequisite at $4,800/year add-on)

Authentication

Auth method: Not documented

User object / data model

User object field mapping is not yet verified for this app.

Core endpoints

Endpoint coverage is not yet verified for this app.

Rate limits, pagination, and events

  • Rate limits: Not documented

  • Rate-limit headers: No

  • Retry-After header: No

  • Rate-limit notes: Not documented

  • Pagination method: none

  • Default page size: 0

  • Max page size: 0

  • Pagination pointer: Not documented

  • Webhooks available: No

  • Webhook notes: No webhook documentation found in official sources.

  • Alternative event strategy: SCIM provisioning via Okta is the only documented automated user lifecycle mechanism.

SCIM API status

  • SCIM available: Yes

  • SCIM version: 2.0

  • Plan required: Enterprise (SCIM is an add-on; SSO prerequisite at $4,800/year add-on)

  • Endpoint: Not documented

  • Supported operations: Create user, Deactivate user

Limitations:

  • SCIM endpoint URL not publicly documented; provisioned through Okta integration setup in LeadIQ admin settings.
  • SSO must be enabled before SCIM can be configured.
  • Only Okta is documented as a supported IdP for SCIM.
  • Entra ID, Google Workspace, and OneLogin are not documented as supported IdPs.
  • Specific SCIM attribute mappings and supported schemas are not publicly published.
  • SCIM is an additional cost on top of the Enterprise plan.

Common scenarios

The only documented automation scenario is Okta SCIM provisioning under an active Enterprise plus SSO configuration.

The setup flow requires generating a SCIM bearer token and base URL from within the LeadIQ admin UI, configuring the LeadIQ Okta application with those credentials, mapping Okta user attributes to LeadIQ SCIM attributes per the Okta/LeadIQ integration guide, and assigning users or groups in Okta to trigger provisioning.

Entra ID, Google Workspace, and OneLogin are not documented as supported IdPs. Any identity graph that routes through a non-Okta IdP has no supported SCIM path into LeadIQ and would require manual provisioning as a fallback. The SCIM endpoint carries no public schema reference and is not introspectable outside the admin UI.

Provision users via Okta SCIM (Enterprise)

  1. Ensure LeadIQ Enterprise plan is active with SSO add-on enabled.
  2. In LeadIQ admin settings, navigate to the SSO/SCIM configuration section.
  3. Generate a SCIM bearer token and copy the SCIM base URL provided by LeadIQ.
  4. In Okta, add the LeadIQ application and configure SCIM provisioning using the bearer token and base URL.
  5. Map Okta user attributes to LeadIQ SCIM attributes as documented in the Okta/LeadIQ integration guide.
  6. Assign users or groups in Okta to trigger provisioning to LeadIQ.

Watch out for: SCIM endpoint URL and token are only accessible inside the LeadIQ admin UI; they are not retrievable via any public API. SSO must be active before SCIM setup is available.

Why building this yourself is a trap

The primary integration trap is layered gating: SCIM cannot be configured until SSO is active, and SSO is a separate $4,800/year add-on that does not come bundled with the Enterprise plan. Teams that assume SCIM is included in Enterprise pricing will hit this wall during implementation, not during procurement.

The Okta-only IdP constraint is a hard architectural limit for any identity graph built on Entra ID or a multi-IdP federation layer.

The absence of a public REST API means there is no fallback for programmatic user management outside the SCIM flow - if SCIM is unavailable or unsupported for a given IdP, the only option is the admin UI.

Automate LeadIQ workflows without one-off scripts

Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.

Every app coverage, including apps without APIs
60+ app integrations plus browser automation for apps without APIs
IT graph reconciliation across apps and your IdP
Less than a week to launch, maintained as APIs and admin consoles change
SOC 2 Type II. ~2 hours of your team's time

UpdatedMar 11, 2026

* Details sourced from official product documentation and admin references.

Keep exploring

Related apps

AdRoll logo

AdRoll

Manual Only
AutomationNot Supported
Last updatedMar 2026

AdRoll's user management is handled through Settings > Company > User Permissions. Only Admins can add, edit, or remove users — General Users cannot manage teammates or access billing by default. AdRoll offers unlimited user seats, so there is no docum

Ahrefs logo

Ahrefs

Manual Only
AutomationNot Supported
Last updatedFeb 2026

Ahrefs provides a four-tier workspace access model — Owner, Admin, Member, and Guest — governed by workspace-level roles combined with per-object share settings. Every app in your stack that handles SEO data access should have a clear offboarding path;

Atlassian Loom logo

Atlassian Loom

Manual Only
AutomationNot Supported
Last updatedFeb 2026

Atlassian Loom uses a fixed, workspace-scoped role model: Admin, Creator (also called Member on legacy Enterprise contracts), Creator Lite (deprecated for new users after February 2026), and Viewer (Education plans only). There are no custom roles or p