SCIM 2.0
SCIM 2.0 (RFC 7644) user and group provisioning for identity providers.
ποΈ List SCIM Users
Lists provisioned users following SCIM 2.0 (RFC 7644) list semantics, returning a ListResponse envelope. Supports filter expressions, startIndex/count or cursor pagination, and sortBy/sortOrder. Authenticated with a SCIM bearer token.
ποΈ Create SCIM User
Provisions a new user from a SCIM 2.0 (RFC 7644) User resource sent by an identity provider such as Okta or Azure AD. Returns the created resource with 201 and application/scim+json content type. Authenticated with a SCIM bearer token.
ποΈ Get SCIM User
Retrieves a single provisioned user by ID as a SCIM 2.0 (RFC 7644) User resource, scoped to the tenant identified by the SCIM bearer token.
ποΈ Replace SCIM User
Replaces a provisioned user's attributes with the supplied SCIM 2.0 (RFC 7644) User resource. Supports optimistic concurrency via the If-Match ETag header. Authenticated with a SCIM bearer token.
ποΈ Patch SCIM User
Applies a SCIM 2.0 (RFC 7644) PatchOp with add/replace/remove operations to a provisioned user, e.g. to deactivate an account. Supports optimistic concurrency via the If-Match ETag header. Authenticated with a SCIM bearer token.
ποΈ Delete SCIM User
Deprovisions a user by ID per SCIM 2.0 (RFC 7644) semantics, returning 204 No Content on success. Authenticated with a SCIM bearer token.
ποΈ List SCIM Groups
Lists provisioned groups following SCIM 2.0 (RFC 7644) list semantics, returning a ListResponse envelope. Supports startIndex/count or cursor pagination and sortBy/sortOrder. Authenticated with a SCIM bearer token.
ποΈ Create SCIM Group
Provisions a new group from a SCIM 2.0 (RFC 7644) Group resource with a display name and optional members. Returns the created resource with 201 and an ETag header. Authenticated with a SCIM bearer token.
ποΈ Get SCIM Group
Retrieves a single provisioned group by ID as a SCIM 2.0 (RFC 7644) Group resource with an ETag header. Returns 404 if the group does not exist for the tenant identified by the SCIM bearer token.
ποΈ Replace SCIM Group
Replaces a group's display name and membership with the supplied SCIM 2.0 (RFC 7644) Group resource. Supports optimistic concurrency via the If-Match ETag header (412 on mismatch); returns 404 if the group does not exist.
ποΈ Patch SCIM Group
Applies a SCIM 2.0 (RFC 7644) PatchOp to a group, supporting add/replace/remove of members and displayName, including Azure AD bracket-filter paths like members[value eq 'id']. Supports If-Match ETag concurrency (412 on mismatch); returns 404 if the group does not exist.
ποΈ Delete SCIM Group
Deletes a provisioned group by ID per SCIM 2.0 (RFC 7644) semantics, returning 204 No Content on success and 404 if the group does not exist.
ποΈ SCIM Service Provider Config
Returns the SCIM 2.0 (RFC 7643) ServiceProviderConfig document describing supported capabilities: patch, filtering, sorting, and ETags are supported, while bulk operations and password change are not. Public endpoint, no authentication required.
ποΈ SCIM Resource Types
Returns the SCIM 2.0 (RFC 7643) ResourceType discovery document listing the User and Group resource types and their endpoints. Public endpoint, no authentication required.
ποΈ SCIM Schemas
Returns the SCIM 2.0 (RFC 7643) schema definitions for the User and Group resources, including their supported attributes. Public endpoint, no authentication required.