# Canva + Lutril: setup guide

> Lutril connects to Canva over SCIM 2.0 and reads every user in the team, including the ones who have been deprovisioned, with their role and their state. A grant provisions an account with no password, for single sign on, and the deadline deprovisions it. Reinstating somebody is NOT automated, deliberately: Canva documents no call that puts a deprovisioned user back, so Lutril refuses rather than reporting access it cannot verify.

Source: https://www.lutril.com/integrations/canva
Category: Design
Auth: api_key
Last verified: 2026-11-09

---

## Setup

1. [object Object]
2. [object Object]
3. Under SCIM, turn on SCIM user provisioning and copy the access token it generates.
4. In Lutril, connect Canva and paste the token.
5. Accounts are created without a password. Canva provisions SCIM users for single sign on, so Lutril never generates a password and has nothing to send anyone: the person signs in through your identity provider.
6. [object Object]
7. Reinstating is where Lutril deliberately stops. Canva documents how to deprovision somebody and nothing about putting them back, and its own error for a soft deleted account says the person has to log in to restore it themselves. So a grant that lands on a deprovisioned account is refused with an explanation rather than reported as granted. Because of that, Canva is excluded from fully unattended provisioning: a human approves, and Lutril still takes the access back on time.
8. Canva publishes only two SCIM roles, Member and Brand Designer, and neither is an administrator. There is no privilege ladder for a grant to climb, so Canva access is time boxed on the account rather than on a role.

## Access requested

- The SCIM token is not scope based. It is generated per team and carries whatever SCIM provisioning allows: reading users, creating them, and setting a user inactive.

## References

- [Canva documentation](https://www.canva.dev/docs/scim/)
- [Canva console](https://www.canva.com/settings/)
- [Canva SCIM API](https://www.canva.dev/docs/scim/)
- [List users](https://www.canva.dev/docs/scim/list-users/)
- [Create a user](https://www.canva.dev/docs/scim/create-user/)
- [Update individual attributes for a user](https://www.canva.dev/docs/scim/update-individual-attributes-user/)
- [How to use Canva's APIs](https://www.canva.com/help/canva-api/)