diff --git a/src/content/docs/fundamentals/setup/account/account-security/scim-setup.mdx b/src/content/docs/fundamentals/setup/account/account-security/scim-setup.mdx
index a4f3583dae0dff..2d5d5274d49ecd 100644
--- a/src/content/docs/fundamentals/setup/account/account-security/scim-setup.mdx
+++ b/src/content/docs/fundamentals/setup/account/account-security/scim-setup.mdx
@@ -38,7 +38,7 @@ Accounts provisioned with SCIM need to verify their email addresses.
 
    :::note
 
-   Cloudflare recommends using Account Owned API tokens, but User API tokens are also supported.
+   Cloudflare recommends using Account Owned API Tokens for SCIM Provisioning. Using user-specific API tokens, while supported, will lead to a broken SCIM connection in the event that the user's policies are revoked from the account with the SCIM integration. Learn more about [Account Owned Tokens](/fundamentals/api/get-started/account-owned-tokens/).
    :::
 
 2. Under **Account Resources**, select the specific account to include or exclude from the dropdown menu, if applicable.