Questions tagged [scim2]

The SCIM 2.0 specifications designed to make managing user identities in cloud-based applications and services easier.

The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using standard protocols. In essence: make it fast, cheap, and easy to move users in to, out of, and around the cloud.

SCIM 2.0 is released as RFC7642, RFC7643 and RFC7644 under IETF in September 2015.

SCIM Homepage http://www.simplecloud.info/

126 questions
2
votes
0 answers

Azure AD does not sync attributes of an extended schema using SCIM 2.0

I have an application that exposes two SCIM 2.0 schemes to sync users: "id": "urn:ietf:params:scim:schemas:core:2.0:User", "id": "urn:ietf:params:scim:schemas:extension:bizagi:2.0:UserProperties" I'm trying to sync users with Azure AD, with default…
Akane
  • 21
  • 2
2
votes
1 answer

Azure Active Directory SCIM Mapping

I am trying to implement SCIM in AAD and am having a hard time mapping the fields. When a user is added to a group. In this example i want the following to happen: (pretty much what scim does) User is provisioned, the user is created. User…
Joel Mora
  • 71
  • 1
  • 7
2
votes
3 answers

SCIM PATCH library

I am implementing SCIM provisioning for my current project, and I am trying to implement the PATCH method and it seems not that easy. What I read in the RFC is that SCIM PATCH is almost like JSON PATCH, but when I look deeper it seems a bit…
2
votes
1 answer

Expose custom claims in SCIM2 endpoints - WSO2

I'm using WSO2 v5.7, I added a custom claims namely "status" through Local claims and added a respective External claims too. Local Claim: External Claim: WSO2 IS Portal: Shows the newly added claim namely Status I triggered the SCIM2 End point…
B.Balamanigandan
  • 4,713
  • 11
  • 68
  • 130
2
votes
2 answers

Azure AD User Provisioning with SCIM 2.0

I'm trying SCIM 2.0 provisioning with Azure AD As premise, I have SCIM a server for my product and I'm implementing PATCH endpoints for use with Okta and Microsoft Azure AD. I'm done testing with Okta, so I'm trying with Azure AD now. I read this…
Daichi
  • 198
  • 2
  • 13
2
votes
1 answer

OneLogin SCIM provisioning for Groups

I am building OneLogin SCIM Provisioner with SAML (Core Schema) app. I've created two controllers - Users and Groups. UsersController logic works perfectly - I can provision users and do all CRUD operations. But I am having issues with provisioning…
Loki
  • 61
  • 4
1
vote
1 answer

Is Microsoft Azure misusing the SCIM RFC? `emails[type eq "work"].value eq "foo@example.com"`

We are having issues implementing our SCIM API and making Azure happy in every scenario. Microsoft tries to provide for folks to configure how their active directory will map to the SCIM implementation with suggestions like: emails[type eq…
Matt
  • 5,028
  • 2
  • 28
  • 55
1
vote
1 answer

PATCH /Groups for AzureAD SCIM synchronization fails

Im currently trying to implement the SCIM protocol for synchronizing Users & Groups from AzureAD into my application. For development I use a MS tutorial and the RFC for…
CuX
  • 11
  • 2
1
vote
1 answer

Why Azure AD SCIM validator always respond “Invalid Credentials”?

I have a web application that exposed an SCIM api endpoint. Then I used Azure AD SCIM validator to validate my SCIM endpoint. Azure AD needs a token to be able to connect to my app. Problem is I generate Oauth 2 token using postman, I use this token…
jetpack
  • 169
  • 1
  • 9
1
vote
0 answers

SCIM2 => Okta provisioning: Is it possible to update attributes with import?

When we initially import users into Okta via our SCIM test app, attributes like name and roles are set correctly in Okta. This appears to be configured here in the "To Okta" provisioning settings: With the list of attributes and action to apply…
Scott Carpenter
  • 1,510
  • 1
  • 12
  • 12
1
vote
0 answers

Problem creating a Salesforce User via SCIMv2 when specifying ContactId

I am using the Salesforce REST APIs to create a Contact and then an associated User. If I allow the creation of a User (via SCIMv2) to create an Account and Contact automatically (as details at link), the creation works. Unfortunately, I need to…
MrGrumpy
  • 21
  • 1
  • 2
1
vote
1 answer

Azure AD provisioning requires two runs to succeed with custom app

We've created an application using SCIM 2 SDK from PingIdentity for provisioning with Azure AD. Custom mapping is set up and working. However, when the user is CREATED, all of the fields are included in the import, but only a few fields are included…
1
vote
1 answer

Can Azure use PUT instead of PATCH for updating resoures via SCIM?

I'm trying to use SCIM for user account provisioning in Azure. It looks like when a resource needs to be updated, PATCH is being used, but the SCIM endpoint doesn't support PATCH, only PUT requests. Is there a way to configure Azure to use PUT…
ebeyrent
  • 413
  • 5
  • 7
1
vote
1 answer

Is that possible to sync users from Windows Active Directory using SCIM 2.0 protocol?

I am trying to sync users from Windows Active Directory and ADFS Server using SCIM 2.0. I google it to sync users from Windows AD and ADFS using SCIM 2.0 protocol. Most of the results came for Azure Active Directory, OKTA and looks like cloud IdP…
Mohan M A
  • 9
  • 2
1
vote
0 answers

i want to implement SCIM with the help of an idP

i'm working in nestjs/prima/postegre project and i can't find any similair code source ressource, how i can update my prisma schema to fit SCIM models or is there any similar project for inspiration? datasource db { provider = "postgresql" url …
1
2
3
8 9