> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Figma

> Connect Figma to Iru Compliance through OAuth to collect organization, team, file, and library inventory along with member and access-control evidence.

### About Figma

Iru uses **OAuth 2.0** (**authorization code**). When you enable the source, a **browser popup** sends you to Figma to sign in and approve scopes (files, projects, org, teams, components, webhooks, analytics, etc.). Some scopes (**for example `variables:read`**) require **Enterprise** - lower tiers simply omit those datasets rather than failing outright.

### How It Works

Iru uses Figma’s **OAuth 2.0 authorization code** flow. When you turn the source on, a **browser popup** sends you to Figma; you sign in, review scopes, and grant access. Figma returns an **authorization code** that Iru exchanges for an **access token** (and refresh where applicable).

| Detail               | Value                                             |
| -------------------- | ------------------------------------------------- |
| **Category**         | Design systems                                    |
| **Authentication**   | OAuth 2.0                                         |
| **Recommended plan** | Organization or Enterprise for broad API coverage |

Representative scopes include **`files:read`**, **`projects:read`**, **`org:read`**, **`org_teams:read`**, **`components:read`**, **`webhooks:write`** (for incremental updates), and **`analytics:read`** - exact lists follow the Figma authorization screen.

Official references: [Authentication](https://www.figma.com/developers/api#authentication), [Scopes](https://www.figma.com/developers/api#scopes), [REST API](https://www.figma.com/developers/api).

### Prerequisites

* **Admin** or **Owner** on the Figma **organization** you want Iru to read.

### Connect Figma to Iru

<Tabs>
  <Tab title="Figma">
    <Note>
      Complete this tab before you enable **Figma** in **Iru Compliance**, so the right org member completes OAuth.
    </Note>

    <Steps>
      <Step title="Sign in to Figma">
        Open [figma.com](https://www.figma.com) and sign in with an **Admin** or **Owner** on the **organization** Iru should read.
      </Step>

      <Step title="Confirm org and files visibility">
        Open **teams**, **projects**, and **files** your compliance program expects in evidence. Enterprise-only scopes (for example some **variables** reads) require the right plan and role.
      </Step>

      <Step title="Review scopes documentation">
        Skim [Figma authentication](https://www.figma.com/developers/api#authentication) and [Scopes](https://www.figma.com/developers/api#scopes) so the consent screen matches your expectations.
      </Step>

      <Step title="Allow pop-ups for Iru">
        In the browser profile you will use for Compliance, allow **pop-ups** for your **Iru** hostname so the Figma OAuth window is not blocked.
      </Step>
    </Steps>

    <Note>
      Continue on the [**Iru Compliance**](#iru-compliance) tab.
    </Note>
  </Tab>

  <Tab title="Iru Compliance">
    <Note>
      Finish the [**Figma**](#figma) tab first.
    </Note>

    <Steps>
      <Step title="Open Sources">
        In Iru Compliance, on the left navigation bar, expand **Compliance** and select **Sources**.

        <Frame>
          <img src="https://mintcdn.com/iru/7HsGH7lnQ8GpVmI0/assets/media/images/iru-navigation-compliance-sources.png?fit=max&auto=format&n=7HsGH7lnQ8GpVmI0&q=85&s=595982441fd777b333b3ecfea24adc24" alt="Left navigation: Compliance expanded, Sources selected" width="424" height="1056" data-path="assets/media/images/iru-navigation-compliance-sources.png" />
        </Frame>
      </Step>

      <Step title="Turn on Figma">
        Find **Figma** (use **Category** or **Search by name or description**). On that card, turn on the **toggle**. A browser tab or window may open for the connector wizard.
      </Step>

      <Step title="Start OAuth from the wizard">
        Start the OAuth flow from the connector wizard (after pop-ups are allowed).
      </Step>

      <Step title="Sign in to Figma and approve">
        Complete Figma login if prompted. Review the scopes and select **Allow access** (or **Authorize**).
      </Step>

      <Step title="Finish the connection">
        When the Figma popup closes and Iru finishes the OAuth exchange, the wizard shows **Connection Configured**.
      </Step>

      <Step title="Confirm the source is Active">
        Close the **Iru is requesting access to external services** browser tab, then return to **Compliance** → **Sources** and confirm the **Figma** card is **Active**.
      </Step>
    </Steps>
  </Tab>
</Tabs>

### Troubleshooting

<AccordionGroup>
  <Accordion title="Nothing opens when you turn the source on">
    Check **pop-up blocker** settings for the Iru site and try again.
  </Accordion>

  <Accordion title="Popup blocked">
    Allow popups for Iru; toggle source off/on.
  </Accordion>

  <Accordion title="Access denied">
    Authorize with **Org Admin**/**Owner**; Editors may lack org scopes.
  </Accordion>

  <Accordion title="Missing teams/files">
    Re-authorize with a user who can access those teams/projects.
  </Accordion>

  <Accordion title="Token expired">
    Re-run the OAuth flow from Iru.
  </Accordion>
</AccordionGroup>

### Considerations

<CardGroup cols={2}>
  <Card title="Removing the authorizing user from the org can…" icon="circle-info">
    Removing the authorizing user from the org can invalidate access - reconnect with a durable admin account.
  </Card>
</CardGroup>

### Related Articles

<CardGroup cols={2}>
  <Card title="Sources Management" icon="plug" href="/en/compliance/sources-management">
    Browse and manage every Compliance source.
  </Card>

  <Card title="Getting Started With Compliance" icon="rocket" href="/en/compliance/getting-started-with-compliance">
    Frameworks, actions, and **Artifacts**.
  </Card>

  <Card title="Iru Overview" icon="layer-group" href="/en/iru/platform-overview/iru-overview">
    How Endpoint, Compliance, and Identity fit together.
  </Card>

  <Card title="Artifacts Management" icon="folder-open" href="/en/compliance/artifacts-management">
    Upload, review, and organize evidence from sources and actions.
  </Card>
</CardGroup>