Questions tagged [scim2]

The SCIM 2.0 specifications designed to make managing user identities in cloud-based applications and services easier.

The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using standard protocols. In essence: make it fast, cheap, and easy to move users in to, out of, and around the cloud.

SCIM 2.0 is released as RFC7642, RFC7643 and RFC7644 under IETF in September 2015.

SCIM Homepage http://www.simplecloud.info/

126 questions
11
votes
1 answer

Okta SCIM Deprovisioning via PUT method?

Our backend server doesn't support HTTP PATCH method (only PUT). As the result we cannot properly Unassign User from SCIM app. When I try Unassign User, Okta SCIM seems make PATCH request (not PUT). The Okta SCIM docs says: Okta also does a PUT if…
Andrii Furmanets
  • 1,081
  • 2
  • 12
  • 29
10
votes
0 answers

How do you publish a SCIM 2.0 provisioning app in the G Suite Marketplace?

I'd like to publish an app on the G Suite Marketplace that allows user and group management/provisioning via SCIM 2.0. Where do I need to go to configure that? This article from 2016 made me think it would be possible…
8
votes
1 answer

Configure SCIM user provisioning with GSuite Google Workspace

I would like to provision my SaaS application and Google Workspace (ex GSuite) using SCIM. I do not find any documentation for this. Just a list of pre-configured applications. It seems to be well supported on Microsoft Azure AD and other identity…
poiuytrez
  • 21,330
  • 35
  • 113
  • 172
6
votes
2 answers

How to support multiple tenants and secret tokens in azure ad scim provisioning

I am trying to create Azure AD provisioning for our Saas product (using scim2). I want multiple customers to be able to connect with their Azure AD tenant. Microsoft has reference code here: https://github.com/AzureAD/SCIMReferenceCode However, that…
5
votes
3 answers

PATCH request for SCIM 2.0

We are sending PATCH request to a server in SCIM specification. As per the SCIM specifications, the request should contain following attributes in PATCH request. op path value So if we are changing the 'givenName' attribute from core schema then…
Ravi
  • 124
  • 3
  • 12
3
votes
1 answer

Handling unsupported SCIM attributes in a PATCH request

I am unsure of how my API should respond when it receives a PATCH request to add/update a SCIM User attribute when the User model does not support that. Let's assume that my User model doesn't have a "title" attribute, but the identity provider…
TimmyTango
  • 33
  • 5
3
votes
1 answer

Where is the Swagger definition located of Scim2 on WSO2 Identity server

I'm looking for the location of the swagger file(if it exist) on the WSO2 identity server 5.7.0 though i cant seem to find it, and the documentation on it (link:https://docs.wso2.com/display/IS570/apidocs/SCIM2-endpoints/) does not have a download…
Martin B
  • 33
  • 6
2
votes
1 answer

Manage custom attributes for user and group in Azure AD

I have an app that is implementing SCIM 2.0. I have connected this app to my Azure AD and I am succeeding to provision users and groups to my app from from Azure AD. I want to add a custom attribute and manage the value of that attribute in Azure AD…
DinaF
  • 101
  • 2
  • 7
2
votes
2 answers

How to remove a value of multi-valued SCIM 2.0 sub-attribute?

I have a complex SCIM attribute that looks like follows: "myattr1": { "subattr1": 5, "subattr2": [1, 2, 3] } I want to modify this to become "myattr1": { "subattr1": 5, "subattr2": [1, 3] } How can I do this using PATCH ? Should I replace…
Rahul
  • 963
  • 9
  • 14
2
votes
1 answer

Unable to remove user from group using scim 2.0 API wso2 IS

I am using WSO2 IS v5.11.0. I am trying to perform a PATCH request, where I am trying to remove a user from the group. API: /Groups/{id} Method: PATCH Payload: { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:PatchOp" ], …
nivedhav
  • 27
  • 5
2
votes
1 answer

Azure Active Directory SCIM: Deprovision member of a group not working

Using Azure AD Premium, Enterprise App & SCIM 2.0 Provisioning Scope - Only assigned Users & Groups I'm trying to work through the use case below: SCIM provisioning of users that are assigned to a given AD Group When a user is added (provisioned)…
hannes neukermans
  • 12,017
  • 7
  • 37
  • 56
2
votes
1 answer

Patch request in SCIM with Azure AD

How should I handle the following PATCH request, for a user that when initially added didn't have any address (not even an empty addresses array)? { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:PatchOp" ], "Operations": [ …
Patman
  • 185
  • 1
  • 13
2
votes
0 answers

Is registration required for custom SCIM extensions?

In our product, we have decided to provide a custom schema extension which will have the attributes that are neither part of core schema nor enterprise schema provided by SCIM2.0. Do we need to register this schema extension with IANA? If yes, what…
amitsp
  • 21
  • 2
2
votes
2 answers

SCIM implementation for Spring Boot SAML and OKTA

My requirement is to implement SCIM 2.0 server for Spring Boot application which supports SAML for OKTA authentication. I haven't found any library provided by Spring Boot for SCIM sever and neither the documentation exists for it in Spring's…
gbhati
  • 493
  • 1
  • 8
  • 20
2
votes
0 answers

How to parse a JSON with SCIM Schemas in java

I have the following json which get from endpoint, { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:response", "urn:scim:schemas:extension:customattrs:2.0:User" ], "meta": { "resourceType": "User", …
Vanitha V
  • 123
  • 2
  • 13
1
2 3
8 9