Questions tagged [scim2]

The SCIM 2.0 specifications designed to make managing user identities in cloud-based applications and services easier.

The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using standard protocols. In essence: make it fast, cheap, and easy to move users in to, out of, and around the cloud.

SCIM 2.0 is released as RFC7642, RFC7643 and RFC7644 under IETF in September 2015.

SCIM Homepage http://www.simplecloud.info/

126 questions
1
vote
1 answer

OKTA SCIM User custom attributes

How can I pass Company Name value from Account/Settings pass as custom attribute to my SCIM Server? Is there any way to access to Company Name value?
Andrii Furmanets
  • 1,081
  • 2
  • 12
  • 29
1
vote
2 answers

What does Test Connection do in Azure AD Enterprise application?

I am in the process of configuring an Scim API with Azure AD. What does this "Test Connection" do when configuring an Enterprise Application? In my case my API endpoint I want to configure is "https://myapi.company.com/api/v2" where resource URL's…
Dhanuka777
  • 8,331
  • 7
  • 70
  • 126
0
votes
1 answer

SCIM Customize Attribute mapping to support multitenant

We are trying to support Customer IDP Auto Provisioning service for our application. while researching on that we found that could be done through SCIM 2.0 supported protocol. We are currently relying on Azure Active Directory and OKTA and we were…
Brijesh Shah
  • 573
  • 6
  • 18
0
votes
1 answer

Azure SCIM custom attribute - email domain as a passed attribute

In my Azure SCIM configuration I want to have the email domain as one of the attributes sent to the receiving app. The receiving app already has the filter built and can then assign rights to the user in provisioning based on email but I cannot…
0
votes
1 answer

Why do I get mutability error in WSO2 IS 6.0.0 when trying to update userName using scim2 PATCH/PUT apis?

When I try to update userName in wso2 Identity server using scim2 PATCH/PUT apis passing User ID. I am getting the below error . { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:Error" ], "scimType": "mutability", "detail": "Attribute userName…
0
votes
2 answers

Authorization Token missing from Azure AD SCIM user provisioning apis

I followed below steps to start SCIM user provisioning inside Azure AD Create an Enterprise application. Enable provisioning by providing the endpoint and secret token. Endpoint: [Domain]/scim Secret token: Provided by me (I have created a unique…
Nisarg
  • 3,024
  • 5
  • 32
  • 54
0
votes
1 answer

OTP and login flow best practices

I have an identity server that i want to only use its SCIM2 APIs without its login form and other features. From my front end and back end applications, i want to manage the Oauth2 login flow including multifactor authentication. What should be my…
user666
  • 1,750
  • 3
  • 18
  • 34
0
votes
1 answer

Does the scim spec define how to specify a filter for nested objects?

If I have data that looks like this: { "source": { "id": "someStr", "type": "someTypeStr", "someObj": { "objId": "someStr", "numField": 2 } }, "destination": { "id": "someStr", "type": "someTypeStr", …
bieno002
  • 405
  • 1
  • 5
  • 12
0
votes
0 answers

Not able to integrate scim api to okta

I want to connect my scim api to okta for user provisioning. Not able to integate scim API with okta. Also not aware of the steps to do the integration. Any help would be highly appreciated. I am providing the scim api code which i am going to…
0
votes
1 answer

Is the attribute ID read-only in a PATCH request?

I'm testing my SCIM implementation as a Service provider. I saw that Okta and Jumpcloud send a PATCH request with the attributes «id» for the operation «replace» : PATCH /Groups/3322 { "schemas": [ …
0
votes
0 answers

How to scope AAD enterprise app provisioning based on App Roles

TL DR: What's the problem? I don't see any output for users when testing 'AppRoleAssignmentsComplex([appRoleAssignments])' in Expression Builder. How do I see this output in the context of a specific app, and test how conditional logic around it…
0
votes
1 answer

is it possible to fetch Groups from custom enterprise application to Azur Ad using user provisioning?

In My Enterprise application, We have some pre defined groups. I am using user provistioning(using SCIM )future of Azur Ad for provistioning. I can sucessfully provistioning user to my application. Now, i want to retrive all my application group…
0
votes
1 answer

WSO2 SCIM2 Schema data types

We are going to add some attributes into scim2-schema-extension.config, but we can't find list of available data types for this config. In the config we have found some types: boolean, string, complex, datetime. What other data types can be used?
Montana
  • 65
  • 7
0
votes
1 answer

Lapse in Identity Provider connection to a SCIM application

What happens when an identity provider (IDP) such as Azure or Okta cannot connect to a SCIM server for a time? Examples of this: Syncing is "disabled" or "paused" for a time, then re-enabled (is "pausing" an option?) Token in use is invalid, so a…
KJ0797
  • 187
  • 1
  • 2
  • 14
0
votes
1 answer

Azure AD SCIM client implementation - Users/Groups clarification

I am building a custom SCIM client that will be connected to Azure AD (using an Enterprise Application). I am only interested in user synchronization, I do not need group information. My question is if I only implement the /User endpoint and not…
Morten Frederiksen
  • 5,114
  • 1
  • 40
  • 72
1 2 3
8 9