What Oleria discovers
- Accounts - Canva users, their last-active date, and the organization-level role (Admin, Brand Designer, or Member) assigned to each.
- Teams and groups - Canva teams and the groups within them, and who belongs to each.
- Roles - the team-level and group-level roles assigned to each membership, in addition to the organization-level role on the account.
- Activity - audit events recorded in your Canva organization (for example, sharing a design or adding someone to a team).
Oleria does not discover individual Canva designs, folders, or brand templates. Canva’s Admin API is scoped to organization and access management, not design content.
Prerequisites
- A Canva Enterprise, Canva for Districts, or Canva for Campus plan. The Admin API isn’t available on other plans.
- A Canva account with the organization Admin role, and either Single Sign-On or Multi-Factor Authentication enabled on that account - Canva requires one of the two before it lets you create an Admin API client.
- Admin access to the Oleria workspace.
Create an Admin API client in Canva
1
Open Admin API settings
Sign in to Canva, select your profile icon, then select Settings. In the left sidebar, under Organization settings, select Admin API.
2
Create a new client
Select Create an API client and give it a recognizable name, for example
Oleria Integration.3
Grant read scopes
Under Scopes, grant the client the following five read-only scopes:
Select Continue.
4
Save the client credentials
Canva displays a Client ID and Client Secret. Copy both now - Canva shows the secret only once. Select I have saved my client secret, then select Done.
If you lose the client secret before you connect Canva to Oleria, create a new Admin API client in Canva and use its Client ID and Client Secret instead. After you connect, Oleria keeps the secret, so losing your own copy needs no action.
Connect Canva to Oleria
1
Open the integration
Go to your Oleria workspace, select Integrations, then select the Canva tile.
2
Complete the connection form
Fill in the connection form:
3
Save the integration
Select Authenticate to validate the credentials and save the integration.
Verify the integration
Confirm the new instance appears on the Connected tab of your Oleria Integrations page with a status of Healthy. After the first sync completes, you can review the discovered accounts, teams, groups, roles, and activity in your Oleria workspace.Update the client secret
If you have a new client secret for the same Admin API client, open the Canva integration’s View Details page from the Connected tab, enter the new Client Secret, and select Update. Oleria doesn’t show the saved secret, so you need to enter it again. You can’t change the Client ID of an existing integration. Canva’s documentation doesn’t describe regenerating the secret of an existing Admin API client, so if Canva no longer accepts the saved secret (for example, because the client was deleted in Canva), create a new Admin API client and reconnect:1
Create a new Admin API client
2
Remove the Canva integration
On the Connected tab of your Oleria Integrations page, select View Details on the Canva integration, then select Remove.
3
Connect Canva again
Follow Connect Canva to Oleria with the new Client ID and Client Secret.
4
Delete the old client in Canva
In Canva, open Settings > Admin API and delete the old Admin API client, so its credentials stop working.
Reconnect a SCIM-based Canva connection
Earlier versions of this integration connected to Canva over SCIM. That connection type is no longer supported: an existing SCIM-based Canva integration shows as unhealthy, and its sync error says the connection was created with the retired SCIM connector. You can’t add a Client ID to a SCIM connection by editing it, so reconnect it:1
Create an Admin API client
2
Remove the SCIM-based integration
On the Connected tab of your Oleria Integrations page, select View Details on the Canva integration, then select Remove.
3
Connect Canva again
Follow Connect Canva to Oleria with the new Client ID and Client Secret.
4
Turn off SCIM provisioning (optional)
In Canva, turn off SCIM provisioning for Oleria if nothing else uses it.
Known limitations
- Canva’s Admin API doesn’t report whether a user is deactivated, so Oleria shows every Canva account as enabled. Use the last-active date to find unused accounts.
- Oleria doesn’t see access granted on individual designs, folders, or brand templates.
- Oleria connects read-only to Canva. This integration does not support remediation actions such as disabling an account or removing a group membership.