> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a Forma connector

> C1 provides identity governance for Forma. Integrate your Forma instance with C1 for unified visibility and governance over user access.

C1 provides identity governance for Forma. Integrate your Forma instance with C1
for unified visibility and governance over user access. The connector reads
identity and access data from Forma's SCIM 2.0 API.

## Capabilities

| Resource | Sync                                                          | Provision |
| -------- | ------------------------------------------------------------- | --------- |
| Users    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Groups   | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

## Gather Forma credentials

<Warning>
  The connector authenticates to Forma's SCIM 2.0 API with a bearer token issued
  from the Forma admin console. The connector performs read-only calls.
</Warning>

<Steps>
  <Step>
    Sign in to the Forma admin console with an administrator account.
  </Step>

  <Step>
    Open the SCIM provisioning or directory integration settings.
  </Step>

  <Step>
    Generate or copy the SCIM bearer token, and note the SCIM base URL shown on
    the same page.
  </Step>

  <Step>
    Store the token securely. It grants read access to your Forma directory.
  </Step>
</Steps>

## Configuration fields

| Field       | Required | Description                                                                                                                                                     |
| ----------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `base-url`  | No       | SCIM 2.0 base URL for your Forma tenant. Defaults to `https://api.joinforma.com/scim/v2`. Confirm the exact value from the Forma admin console SCIM setup page. |
| `api-token` | Yes      | SCIM 2.0 bearer token issued from the Forma admin console.                                                                                                      |

## Synced resource types

* **Users**: Forma users from `GET /scim/v2/Users`. Each user carries its SCIM
  `id`, `userName`, name, primary email, and active status.
* **Groups**: Forma groups from `GET /scim/v2/Groups`. Each group exposes a
  `member` entitlement.
* **Group membership grants**: every entry in a group's SCIM `members` list is
  emitted as a grant of that group's `member` entitlement to the member user.

## Special notes

* Group memberships are not separate resources; they are grant edges on the
  group resource.
* Forma SCIM list endpoints use 1-based `startIndex` and `count` offset
  pagination. The connector requests the largest standard SCIM page size.
* On rate limit or transient errors, the connector retries with exponential
  backoff.

## Configure the Forma connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Forma** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new Forma connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the Forma credentials:

        * **SCIM bearer token**: the token from the Forma admin console.
        * **SCIM base URL**: leave blank to use the default, or enter the base
          URL shown in the Forma admin console SCIM setup page.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**.
        You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your Forma connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the Forma connector in your own
    environment.

    <Steps>
      <Step>
        Create secrets for the Forma SCIM bearer token.
      </Step>

      <Step>
        Configure the connector environment variables:

        * **BATON\_API\_TOKEN**: the SCIM bearer token from the Forma admin console.
        * **BATON\_BASE\_URL**: optional SCIM base URL override; omit to use the
          default.
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your Forma connector is now pulling access data into C1.
  </Tab>
</Tabs>