Set up a Forma connector

C1 provides identity governance for Forma. Integrate your Forma instance with C1 for unified visibility and governance over user access.

C1 provides identity governance for Forma. Integrate your Forma instance with C1 for unified visibility and governance over user access. The connector reads identity and access data from Forma’s SCIM 2.0 API.

Capabilities

Resource	Sync	Provision
Users
Groups

Gather Forma credentials

The connector authenticates to Forma’s SCIM 2.0 API with a bearer token issued from the Forma admin console. The connector performs read-only calls.

1. Sign in to the Forma admin console with an administrator account.

2. Open the SCIM provisioning or directory integration settings.

3. Generate or copy the SCIM bearer token, and note the SCIM base URL shown on the same page.

4. Store the token securely. It grants read access to your Forma directory.

Configuration fields

Field	Required	Description
base-url	No	SCIM 2.0 base URL for your Forma tenant. Defaults to https://api.joinforma.com/scim/v2. Confirm the exact value from the Forma admin console SCIM setup page.
api-token	Yes	SCIM 2.0 bearer token issued from the Forma admin console.

Synced resource types

• Users: Forma users from GET /scim/v2/Users. Each user carries its SCIM id, userName, name, primary email, and active status.
• Groups: Forma groups from GET /scim/v2/Groups. Each group exposes a member entitlement.
• Group membership grants: every entry in a group’s SCIM members list is emitted as a grant of that group’s member entitlement to the member user.

Special notes

• Group memberships are not separate resources; they are grant edges on the group resource.
• Forma SCIM list endpoints use 1-based startIndex and count offset pagination. The connector requests the largest standard SCIM page size.
• On rate limit or transient errors, the connector retries with exponential backoff.

Configure the Forma connector

Cloud-hosted

Follow these instructions to use a built-in, no-code connector hosted by C1.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for Forma and click Add.

3. Choose how to set up the new Forma connector.

4. Set the owner for this connector.

5. Click Next.

6. Find the Settings area of the page and click Edit.

7. Enter the Forma credentials:

   • SCIM bearer token: the token from the Forma admin console.
   • SCIM base URL: leave blank to use the default, or enter the base URL shown in the Forma admin console SCIM setup page.
8. Click Save.

9. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Done. Your Forma connector is now pulling access data into C1.

Self-hosted

Follow these instructions to run the Forma connector in your own environment.

1. Create secrets for the Forma SCIM bearer token.

2. Configure the connector environment variables:

   • BATON_API_TOKEN: the SCIM bearer token from the Forma admin console.
   • BATON_BASE_URL: optional SCIM base URL override; omit to use the default.
3. Deploy the connector using your standard self-hosted connector process.

Done. Your Forma connector is now pulling access data into C1.