diff --git a/.changelog/2994.txt b/.changelog/2994.txt
new file mode 100644
index 0000000000..c695d49fcf
--- /dev/null
+++ b/.changelog/2994.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/tencentcloud_identity_center_scim_credential: support param `credential_secret`
+```
\ No newline at end of file
diff --git a/tencentcloud/services/tco/resource_tc_identity_center_scim_credential.go b/tencentcloud/services/tco/resource_tc_identity_center_scim_credential.go
index 8e7ff437d1..7ddefaee2a 100644
--- a/tencentcloud/services/tco/resource_tc_identity_center_scim_credential.go
+++ b/tencentcloud/services/tco/resource_tc_identity_center_scim_credential.go
@@ -42,6 +42,13 @@ func ResourceTencentCloudIdentityCenterScimCredential() *schema.Resource {
 				Description: "SCIM key ID. scimcred-prefix and followed by 12 random digits/lowercase letters.",
 			},
 
+			"credential_secret": {
+				Type:        schema.TypeString,
+				Computed:    true,
+				Sensitive:   true,
+				Description: "SCIM key.",
+			},
+
 			"credential_type": {
 				Type:        schema.TypeString,
 				Computed:    true,
@@ -104,6 +111,9 @@ func resourceTencentCloudIdentityCenterScimCredentialCreate(d *schema.ResourceDa
 	credentialId = *response.Response.CredentialId
 
 	d.SetId(strings.Join([]string{zoneId, credentialId}, tccommon.FILED_SP))
+	if response.Response != nil && response.Response.CredentialSecret != nil {
+		_ = d.Set("credential_secret", *response.Response.CredentialSecret)
+	}
 
 	return resourceTencentCloudIdentityCenterScimCredentialRead(d, meta)
 }
diff --git a/tencentcloud/services/tco/resource_tc_identity_center_scim_credential_test.go b/tencentcloud/services/tco/resource_tc_identity_center_scim_credential_test.go
index 41672978b7..2717ca011b 100644
--- a/tencentcloud/services/tco/resource_tc_identity_center_scim_credential_test.go
+++ b/tencentcloud/services/tco/resource_tc_identity_center_scim_credential_test.go
@@ -25,12 +25,14 @@ func TestAccTencentCloudIdentityCenterScimCredentialResource_basic(t *testing.T)
 					resource.TestCheckResourceAttrSet("tencentcloud_identity_center_scim_credential.identity_center_scim_credential", "credential_type"),
 					resource.TestCheckResourceAttrSet("tencentcloud_identity_center_scim_credential.identity_center_scim_credential", "create_time"),
 					resource.TestCheckResourceAttrSet("tencentcloud_identity_center_scim_credential.identity_center_scim_credential", "expire_time"),
+					resource.TestCheckResourceAttrSet("tencentcloud_identity_center_scim_credential.identity_center_scim_credential", "credential_secret"),
 				),
 			},
 			{
-				ResourceName:      "tencentcloud_identity_center_scim_credential.identity_center_scim_credential",
-				ImportState:       true,
-				ImportStateVerify: true,
+				ResourceName:            "tencentcloud_identity_center_scim_credential.identity_center_scim_credential",
+				ImportState:             true,
+				ImportStateVerify:       true,
+				ImportStateVerifyIgnore: []string{"credential_secret"},
 			},
 		},
 	})
diff --git a/website/docs/r/identity_center_scim_credential.html.markdown b/website/docs/r/identity_center_scim_credential.html.markdown
index 6ea894d8df..c5b9805ab6 100644
--- a/website/docs/r/identity_center_scim_credential.html.markdown
+++ b/website/docs/r/identity_center_scim_credential.html.markdown
@@ -32,6 +32,7 @@ In addition to all arguments above, the following attributes are exported:
 * `id` - ID of the resource.
 * `create_time` - SCIM create time.
 * `credential_id` - SCIM key ID. scimcred-prefix and followed by 12 random digits/lowercase letters.
+* `credential_secret` - SCIM key.
 * `credential_type` - SCIM credential type.
 * `expire_time` - SCIM expire time.
 * `status` - SCIM key status, Enabled-On, Disabled-Closed.