Skip to main content

​
After this article

You will be able to connect Mixpanel to Lumos to sync Mixpanel users for visibility and Access Reviews, and to deprovision users during offboarding.

​
Capabilities

Deprovisioning is available for Offboarding, Access Reviews, and License Management. Mixpanel deletion is permanent. The user and their data are removed, not just deactivated.

​
Required plan and roles

  • Mixpanel plan: at least the Mixpanel Enterprise plan is required.
  • Mixpanel role: the connecting Mixpanel user must be at least an Admin.
  • Prerequisites: your organization must have SCIM enabled and must have claimed the domains you want to manage in your SSO settings before connecting.
  • Permission scoping: the integration authenticates with a Mixpanel SCIM token. The token is used to list users (read) and to delete users when Lumos deprovisions them (write). There is no read-only variant documented.

​
Read-only access vs provisioning

Is read-only possible? Not as a documented option. The single SCIM token this connector uses covers both listing users and deleting them during deprovisioning, and no narrower, read-only token is documented. What full provisioning requires. The SCIM token described below, generated after SCIM is enabled and your domains are claimed in your SSO settings. That same token is what lets Lumos deprovision users. Watch out for. Deprovisioning in Mixpanel is permanent deletion of the user and their data, not deactivation. There’s no separate suspend action, so any workflow that deprovisions a user removes them from Mixpanel outright.

​
Instructions

Phase 1: Generate a SCIM token in Mixpanel
  1. Confirm SCIM is enabled for your organization and that the domains you want to manage are claimed in your SSO settings.
  2. Generate your SCIM token in Mixpanel and save it.
Phase 2: Connect in Lumos
  1. Find the Mixpanel card in your Lumos integrations (reconnect an existing card or add a new one).
  2. Enter a unique identifier in the App Instance Identifier field (such as lumos-mixpanel-1).
  3. Paste your SCIM token into the API Key field.
  4. Click Connect.

​
API Endpoints Used

​
Troubleshooting

Connection fails. Confirm your organization is on at least the Enterprise plan, SCIM is enabled, the relevant domains are claimed in your SSO settings, and the token was generated by a user who is at least an Admin. A user disappears from Lumos. When Mixpanel no longer returns a user via SCIM, Lumos marks the account Deprovisioned. This is expected after a deletion.