Questions tagged [scim2]

The SCIM 2.0 specifications designed to make managing user identities in cloud-based applications and services easier.

The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using standard protocols. In essence: make it fast, cheap, and easy to move users in to, out of, and around the cloud.

SCIM 2.0 is released as RFC7642, RFC7643 and RFC7644 under IETF in September 2015.

SCIM Homepage http://www.simplecloud.info/

126 questions
1
vote
1 answer

Can we use the "request" returnable property of SCIM attribute even in GET request?

The SCIM RFC 7643 section-7 describes the schema definitions, the "returned" expects one of the following as the value:- always never default - The attribute is returned by default in all SCIM operation responses where attribute values are…
Mohan
  • 97
  • 1
  • 6
1
vote
0 answers

Onelogin role Rename doesn't work as expected in onelogin scim provisioning

I build SCIM Provisioning integration with OneLogin. I use role as user groups and rule to connect roles to the SCIM Provisioning App. When I rename role, I expect to get patch command for group rename, Something like: { "schemas": [ …
neverEugene
  • 69
  • 10
1
vote
0 answers

How to replace ValidationProblemDetails with SCIM-compatible model validation error details in ASP.NET Core 3.1 Web API?

ASP.NET Core 3.1 is taking POSTed JSON (for creating a user via SCIM v2 in my fledgling Web API) and model-binding it to my C# request-data class CreateUserRequest like a champ. And it produces nice ProblemDetails-based errors if there is an error…
Bellarmine Head
  • 3,397
  • 2
  • 22
  • 31
1
vote
1 answer

User provisioning via SCIM with and without SSO

I would like to understand why most IdPs only offer the SCIM service together with SSO (especially SAML). For me, these are two different concepts SSO: loging in SCIM: user provisioning I'm referring to user provisioning via SCIM via an API, not…
ezdazuzena
  • 6,120
  • 6
  • 41
  • 71
1
vote
1 answer

Azure AD Enterprise application role change doesn't trigger provisioning update for Zoom or DocuSign

I've set up Zoom and DocuSign with SSO and Automatic provisioning in Azure AD Enterprise Applications. Just in Time provisioning works as expected after ensuring roles are correctly mapped. Automatic provisioning however only appears to add users…
1
vote
1 answer

Search/List Users Filter Expression Syntax in RingCentral SCIM 2.0 API

In the RingCentral API reference there is a Search/List Users function that requires a filter expression. What is the syntax of this filter expression? The description of the filter parameter is simply "only support 'userName' or 'email' filter…
Steve Glick
  • 698
  • 7
  • 19
1
vote
1 answer

WSO2is SCIM2 filter Enterprise attributers

I try to filter users in base to a certain attribute, I found an example to do this: https://identity.sample.com/t/tenantname.com/scim2/Users?filter=EnterpriseUser.organization+Eq+WSO2 When I run the previos query, this is the result: { …
BryGom
  • 649
  • 1
  • 11
  • 21
1
vote
1 answer

Azure AD SCIM 2.0 roles and appRoleAssignments empty

In Azure AD I setup SCIM which is working great. However for some reason roles as well as appRoleAssignments are never sent in the body of a SCIM POST or PATCH request. As an example, here's the SCIM body for a POST request: { "schemas": [ …
Ronald Hulshof
  • 1,986
  • 16
  • 22
1
vote
3 answers

What naming convention should I use for a custom SCIM schema?

I am struggling to find documentation or a recommendation on how to name the schema id for a custom SCIM resource. { "id": "urn:ietf:params:scim:schemas:mycompany:2.0:MyResource", "name": "MyResource", "description": "MyResource description", …
stefanfoulis
  • 649
  • 4
  • 16
1
vote
1 answer

Why does the WSO2 IS 5.6.0 SCIM2 Group API throw error when trying to insert or update users?

I'm trying to use the WSO2 Identity Server SCIM2 APIs to create and update users and groups. However I am facing problems with the Group Update API (PUT /scim2/Groups/{id}): If I try to insert some user into the body of the message, the API always…
tinocoam
  • 108
  • 1
  • 6
1
vote
0 answers

SCIM and web api 2

I am trying to implement SCIM with Web Api 2 (c#) and I've found the nuget package and some documentation from Microsoft and their sample code. My understanding from the SCIM documentation is that they just need an API with the specified user/Group…
Ashkan S
  • 10,464
  • 6
  • 51
  • 80
1
vote
2 answers

WSO2 Scim2 Password Change

I am currently using IS 5.5.0 and utilizing the SCIM2 API to provision users that will eventually need their passwords changed. I have successfully created the users using the POST operation and can update certain attributes using the PATCH…
advasil
  • 11
  • 3
1
vote
2 answers

Cannot create askPassword user with scim2

Hi I use wso2is version 5.4.1 as identity server. I want to create user using scim2 api. When user is created, an email is sent to the user and he will be able to click on a link recieved in email and through the link he will be able to change…
dtechlearn
  • 363
  • 2
  • 4
  • 21
1
vote
0 answers

EclipseLink in Jersey Test Framework blocking test

I'm trying to write some integration tests for a SCIM client implementation and EclipseLink has me blocked. The SCIM User schema includes a nested Email object. Email has a field called 'type'. This is part of the standard and is not a…
1
vote
1 answer

OneLogin User Provisioning with SCIM 2.0

I am creating a web application compliant with SCIM 2.0. I can create and update users using provisioning, but deleting users always fails. So, I tried a number of things to resolve my issue, and I found that the "SCIM Provisioner with SAML (Core…
Daichi
  • 198
  • 2
  • 13
1 2
3
8 9