SCIM 2.0

SCIM 2.0 (RFC 7644) user and group provisioning for identity providers.

📄️ List SCIM Users

Lists provisioned users following SCIM 2.0 (RFC 7644) list semantics, returning a ListResponse envelope. Supports filter expressions, startIndex/count or cursor pagination, and sortBy/sortOrder. Authenticated with a SCIM bearer token.

📄️ Create SCIM User

Provisions a new user from a SCIM 2.0 (RFC 7644) User resource sent by an identity provider such as Okta or Azure AD. Returns the created resource with 201 and application/scim+json content type. Authenticated with a SCIM bearer token.

📄️ Get SCIM User

Retrieves a single provisioned user by ID as a SCIM 2.0 (RFC 7644) User resource, scoped to the tenant identified by the SCIM bearer token.

📄️ Replace SCIM User

Replaces a provisioned user's attributes with the supplied SCIM 2.0 (RFC 7644) User resource. Supports optimistic concurrency via the If-Match ETag header. Authenticated with a SCIM bearer token.

📄️ Patch SCIM User

Applies a SCIM 2.0 (RFC 7644) PatchOp with add/replace/remove operations to a provisioned user, e.g. to deactivate an account. Supports optimistic concurrency via the If-Match ETag header. Authenticated with a SCIM bearer token.

📄️ Delete SCIM User

Deprovisions a user by ID per SCIM 2.0 (RFC 7644) semantics, returning 204 No Content on success. Authenticated with a SCIM bearer token.

📄️ List SCIM Groups

Lists provisioned groups following SCIM 2.0 (RFC 7644) list semantics, returning a ListResponse envelope. Supports startIndex/count or cursor pagination and sortBy/sortOrder. Authenticated with a SCIM bearer token.

📄️ Create SCIM Group

Provisions a new group from a SCIM 2.0 (RFC 7644) Group resource with a display name and optional members. Returns the created resource with 201 and an ETag header. Authenticated with a SCIM bearer token.

📄️ Get SCIM Group

Retrieves a single provisioned group by ID as a SCIM 2.0 (RFC 7644) Group resource with an ETag header. Returns 404 if the group does not exist for the tenant identified by the SCIM bearer token.

📄️ Replace SCIM Group

Replaces a group's display name and membership with the supplied SCIM 2.0 (RFC 7644) Group resource. Supports optimistic concurrency via the If-Match ETag header (412 on mismatch); returns 404 if the group does not exist.

📄️ Patch SCIM Group

Applies a SCIM 2.0 (RFC 7644) PatchOp to a group, supporting add/replace/remove of members and displayName, including Azure AD bracket-filter paths like members[value eq 'id']. Supports If-Match ETag concurrency (412 on mismatch); returns 404 if the group does not exist.

📄️ Delete SCIM Group

Deletes a provisioned group by ID per SCIM 2.0 (RFC 7644) semantics, returning 204 No Content on success and 404 if the group does not exist.

📄️ SCIM Service Provider Config

Returns the SCIM 2.0 (RFC 7643) ServiceProviderConfig document describing supported capabilities: patch, filtering, sorting, and ETags are supported, while bulk operations and password change are not. Public endpoint, no authentication required.

📄️ SCIM Resource Types

Returns the SCIM 2.0 (RFC 7643) ResourceType discovery document listing the User and Group resource types and their endpoints. Public endpoint, no authentication required.

📄️ SCIM Schemas

Returns the SCIM 2.0 (RFC 7643) schema definitions for the User and Group resources, including their supported attributes. Public endpoint, no authentication required.