diff --git a/config/initializers/scimitar.rb b/config/initializers/scimitar.rb
index c9d5056..82e2c68 100644
--- a/config/initializers/scimitar.rb
+++ b/config/initializers/scimitar.rb
@@ -11,7 +11,7 @@ Rails.application.config.to_prepare do
       api_key = ApiKey.active.with_key(token).first
       allowed = false
       if api_key
-        allowed = api_key.api_key_scopes.any? { |s| s.resource == "scim" || s.action == "access_scim_endpoints" }
+        allowed = api_key.api_key_scopes.empty? || api_key.api_key_scopes.any? { |s| s.resource == "scim" || s.action == "access_scim_endpoints" }
       end
       allowed
     end