Published Date: June 25, 2026 | Last Updated: June 26, 2026
Overview
The Canva integration connects Tello IAM to your Canva team using SCIM provisioning. The connection requires a single SCIM API Token generated from Canva team settings.
Before connecting
The Administrator completing this setup must have Admin access to the Canva team. SSO must be configured before SCIM user provisioning can be enabled.
Step 1: Generate a SCIM API Token in Canva
- Sign in to Canva and navigate to Account Settings → SSO & provisioning.
- Select Enable SCIM user provisioning.
- Canva generates a long-lived bearer token. Copy the token value.
Important: Copy the SCIM API Token before leaving this page. If lost, a new token must be generated.
Step 2: Connect Canva in Tello IAM
- Navigate to Integrations in the left navigation.
- Select + Add Integration.
- Search for Canva and select Add.
- Enter the SCIM API Token in the SCIM API Token field.
- Select Test Connection to verify the token is valid. A Connection successful confirmation will appear if accepted.
- Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.
Verify the connection
After the initial sync completes, confirm the following on the Integrations page:
- The Canva integration displays a status of
Active - A sync timestamp is present and reflects the completed sync
- User records on the Users page display detected Canva permissions in the Access column
Reauthorizing the connection
If the Canva integration loses authorization, it will display an error on the Integrations page. To reauthorize, generate a new SCIM API Token in Canva team settings, then select the integration row in Tello IAM, select Configure, and enter the new token.
Related articles
- Configuring Integrations — manage sync schedules, drift detection, and integration settings
- Understanding Errors — resolve integration errors and authorization failures
Seasoft Security Solutions LLC | Tello IAM