> ## Documentation Index
> Fetch the complete documentation index at: https://www.truefoundry.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Teams

> Detailed guide to how to add, manage and delete teams in Truefoundry

Teams allow Admins to group multiple users together and ease out the role assignment in resources. Teams can be created manually, provisioned automatically from your Identity Provider (IdP) via SCIM, or managed declaratively through GitOps.

## Provision teams via SCIM

When the tenant is configured for **SCIM provisioning**, every group your IdP pushes through SCIM is automatically created as a TrueFoundry team. Adding or removing a user from the IdP group adds or removes the corresponding team membership in TrueFoundry — no manual maintenance required.

<Info>
  SCIM is configured **once per tenant** under **Settings > Security & Access > Provisioning**. The same setup syncs both users and groups. See [Manage Users — Configure a provisioning mode](/docs/platform/user-management#configure-a-provisioning-mode) (SCIM tab) for the full configuration steps (SCIM URL, token, and IdP setup).
</Info>

After SCIM is wired up, teams synced from your IdP behave just like manually created teams — you can grant them resource access, assign tenant-level roles, and add identity provider mappings.

<Info>
  **SCIM group name convention** — The group name in your IdP becomes the team name in TrueFoundry, so it must follow these rules: only alphanumeric characters, hyphens (`-`), and underscores (`_`) are allowed, and names can be up to 36 characters in length.
</Info>

## Create a team manually

Admins can create manual teams and manage the members. Admins can also add `managers` to a team to further manage the team members themself. To create a team in TrueFoundry, follow these steps:

<iframe href="https://app.supademo.com/embed/cmqgjriq05s13qmgjyu2diquh?embed_v=2" typeofembed="iframe" height="475px" width="100%" src="https://app.supademo.com/embed/cmqgjriq05s13qmgjyu2diquh?embed_v=2" style={{ border: "none", display: "flex", margin: "auto" }} />

## Identity provider mappings

If you configure an [Identity Provider](/docs/platform/identity-providers) to resolve tokens to TrueFoundry users, you can map IdP claim values directly to teams.

Use this when your IdP token contains a team or group claim and you want users with a matching claim value to be associated with a TrueFoundry team.

<Frame caption="Identity provider mapping while creating a team">
  <img src="https://mintcdn.com/truefoundry/xnxwG9wbAPzCd_DD/images/docs/platform/team-identity-provider-mapping.png?fit=max&auto=format&n=xnxwG9wbAPzCd_DD&q=85&s=3bd8d79bb5800c0f9882238e7a2e3b66" alt="Team form showing identity provider FQN and claim value mapping fields" width="1024" height="559" data-path="images/docs/platform/team-identity-provider-mapping.png" />
</Frame>

<ParamField body="Identity Provider FQN" type="string" required>
  The fully qualified name of the Identity Provider that validates the incoming JWT. Copy this value from the Identity Provider configuration.
</ParamField>

<ParamField body="Claim Value" type="string" required>
  The value from the configured team claim that should map to this team. For example, if your Identity Provider uses `groups` as the team claim and the token contains `ml-platform`, enter `ml-platform` here.
</ParamField>

## Grant access to a resource

Once a team has been created, you can grant it access to resources. To do so, follow these steps:

<iframe href="https://app.supademo.com/embed/cmqgkhaoj5t2mqmgjl7wazu1i?embed_v=2" typeofembed="iframe" height="475px" width="100%" src="https://app.supademo.com/embed/cmqgkhaoj5t2mqmgjl7wazu1i?embed_v=2" style={{ border: "none", display: "flex", margin: "auto" }} />

## Manage Teams via Gitops

Admins can manage teams programmatically by using the `tfy apply` command on the team YAML file. You can get the instructions by clicking on the `Apply Using YAML` in the Edit form.

<img src="https://mintcdn.com/truefoundry/2fPZGuuvhgm5F-Rk/images/docs/platform/team-apply-using-yaml-button.png?fit=max&auto=format&n=2fPZGuuvhgm5F-Rk&q=85&s=cd6d36485de0350d445eab5364a07916" alt="Apply Using YAML button" width="3024" height="1642" data-path="images/docs/platform/team-apply-using-yaml-button.png" />

<img src="https://mintcdn.com/truefoundry/2fPZGuuvhgm5F-Rk/images/docs/platform/team-apply-using-yaml-instructions.png?fit=max&auto=format&n=2fPZGuuvhgm5F-Rk&q=85&s=40701f224e811ea992e7d78493faa1fd" alt="Apply Using YAML instructions" width="3024" height="1642" data-path="images/docs/platform/team-apply-using-yaml-instructions.png" />

## Manage Teams via API

You can find all the team related APIs in the [API reference](/docs/api-reference/teams/list-teams).