Set up a Stripe connector

C1 provides identity governance for Stripe. Integrate your Stripe account with C1 for unified visibility and governance over team member access.

C1 provides identity governance for Stripe. Integrate your Stripe account with C1 for unified visibility and governance over team member access.

Capabilities

Resource	Sync	Provision
Users
Groups

The connector reads one Stripe account — the account the SCIM token belongs to — through Stripe’s SCIM 2.0 interface. It syncs that account’s team members and SCIM groups, and the membership of each group. Team members deactivated through SCIM sync as disabled.

Stripe roles are assigned through your SAML identity provider or the Stripe Dashboard and are not readable through SCIM, so roles are not synced. API keys and other non-human identities do not appear in Stripe’s SCIM directory and are not synced.

Prerequisites

Stripe issues SCIM tokens for live mode only — there is no sandbox or test-mode SCIM. Before Stripe will issue a SCIM token, the account must be activated, have a verified domain, and have SAML single sign-on configured.

1. Activate your Stripe account (SCIM is not available for accounts that have not completed activation).

2. Verify your organization’s domain in the Stripe Dashboard.

3. Configure SAML single sign-on for your Stripe account.

Gather Stripe credentials

1. Sign in to the Stripe Dashboard as an administrator.

2. Open your single sign-on settings and create a SCIM token. This is the same token class used to connect an identity provider’s SCIM provisioning to Stripe.

3. Copy the token value. It is shown only once at creation time.

Configure the Stripe connector

Cloud-hosted

Follow these instructions to use a built-in, no-code connector hosted by C1.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for Stripe and click Add.

3. Choose how to set up the new Stripe connector.

4. Set the owner for this connector.

5. Click Next.

6. Find the Settings area of the page and click Edit.

7. Enter the Stripe credentials:

   • Stripe SCIM base URL: Stripe’s fixed SCIM endpoint, https://access.stripe.com/scim/v2. The same value applies to every Stripe account.
   • Stripe SCIM token: the SCIM token you created. The token selects the Stripe account by itself; no other identifier is needed.
8. Click Save.

9. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Done. Your Stripe connector is now pulling access data into C1.

Self-hosted

Follow these instructions to run the Stripe connector in your own environment.

1. Create a secret for the Stripe SCIM token.

2. Configure the connector environment variables:

   • BATON_BASE_URL: Stripe’s fixed SCIM endpoint, https://access.stripe.com/scim/v2.
   • BATON_STRIPE_SCIM_TOKEN: the SCIM token you created.
3. Deploy the connector using your standard self-hosted connector process.

Done. Your Stripe connector is now pulling access data into C1.