A cloud-based identity and access management service for securing user authentication and resource access
Hi, thanks for sharing the detailed error message.
The error returned by Slack "non_org_teams_only" with HTTP 400 BadRequest indicates that the authorization request is being sent to a Slack environment that does not support SCIM provisioning.
Slack only enables SCIM provisioning on Enterprise Grid organizations, and this endpoint is not available for standalone workspaces. When Entra attempts to call Slack’s SCIM API (https://api.slack.com/scim/v1/...), Slack returns this error for workspaces that are not part of an Enterprise Grid org.
Microsoft’s Slack provisioning documentation also confirms that the Slack environment must meet SCIM prerequisites for the integration to work.
This error occurs because:
- Your Slack workspace is likely on Free, Pro, or Business+, which do not support SCIM.
- SCIM provisioning requires:
- Slack Enterprise Grid subscription
- Setup performed from the Org Admin (not workspace admin)
- SCIM enabled at the organization level
- Setup performed from the Org Admin (not workspace admin)
- Slack Enterprise Grid subscription
If any of these are missing, Slack rejects the SCIM request, resulting in the non_org_teams_only error.
Below are the step to resolve:
1.Verify whether your Slack environment is Enterprise Grid.
- If it is not, then automatic provisioning from Entra cannot be enabled — this is expected behavior.
- Only SSO will work in non‑Grid environments.
2.If you do have Enterprise Grid, ensure the following:
- You are logged in as an Org Owner / Org Admin, not a workspace admin.
- SCIM is enabled under: Slack Admin → Organization Settings → User Provisioning (SCIM)
- Generate the SCIM token from the Org Admin portal, not from a workspace.
3.After enabling SCIM at the org level, return to Entra → Provisioning → Test Connection.