Integration Guide: Intercom

Overview

The Intercom integration connects Tello IAM to your Intercom workspace using SCIM provisioning. The connection requires a SCIM Base URL and a SCIM API Token, both generated in Intercom after enabling SCIM provisioning in workspace security settings.

Before connecting

The Administrator completing this setup must have Admin access to the Intercom workspace. SAML SSO must be enabled in Intercom before the Provisioning section becomes available.

Step 1: Enable SCIM provisioning in Intercom

1. Sign in to Intercom and navigate to Settings → Workspace → Security.
2. Select the Workspace tab.
3. Under Authentication methods, enable SAML SSO. The Provisioning section appears once SAML SSO is active.
4. Expand the Provisioning section.
5. Under Provisioning method, enable Enable SCIM provisioning.
6. Once enabled, Intercom generates a Base URL and an API Token. Copy both values.

Important: Copy the SCIM API Token before leaving this page. It may not be displayed again. If lost, a new token must be generated.

Step 2: Connect Intercom in Tello IAM

1. Navigate to Integrations in the left navigation.
2. Select + Add Integration.
3. Search for Intercom and select Add.
4. Enter the SCIM Base URL in the SCIM Base URL field.
5. Enter the SCIM API Token in the SCIM API Token field.
6. Select Test Connection to verify both values are valid. A Connection successful confirmation will appear if accepted.
7. Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.

Verify the connection

After the initial sync completes, confirm the following on the Integrations page:

• The Intercom integration displays a status of Active
• A sync timestamp is present and reflects the completed sync
• User records on the Users page display detected Intercom permissions in the Access column

Reauthorizing the connection

If the Intercom integration loses authorization, it will display an error on the Integrations page. To reauthorize, regenerate the SCIM API Token in Intercom, then select the integration row in Tello IAM, select Configure, and enter the new token.

Related articles

• Configuring Integrations — manage sync schedules, drift detection, and integration settings
• Understanding Errors — resolve integration errors and authorization failures