Questions tagged [scim]

The System for Cross-domain Identity Management (SCIM) specification is designed to make managing user identities in cloud-based applications and services easier.

The SCIM standard was created to simplify user management in the cloud by defining a schema for representing users and groups and a REST API for all the necessary CRUD operations.

SCIM homepage is http://www.simplecloud.info

212 questions
2
votes
1 answer

Azure User/Group provisioning with SCIM problem with boolean values

I have written an application compliant to the SCIM standard (https://tools.ietf.org/html/rfc7644), but integrating with Azure I can see that it fails to update a user if it is disabled, the request that Azure send is the following: PATCH…
A. F.
  • 43
  • 6
2
votes
1 answer

Expose custom claims in SCIM2 endpoints - WSO2

I'm using WSO2 v5.7, I added a custom claims namely "status" through Local claims and added a respective External claims too. Local Claim: External Claim: WSO2 IS Portal: Shows the newly added claim namely Status I triggered the SCIM2 End point…
B.Balamanigandan
  • 3,915
  • 5
  • 55
  • 107
2
votes
2 answers

provisioning using SCIM

Does Azure AD has a mechanism to detect if the target system is down during SCIM synch? For example a user is added to AD and this user has to be provisioned to some other target system that also supports SCIM, however the target system is down due…
borna
  • 856
  • 1
  • 12
  • 28
2
votes
2 answers

Azure AD User Provisioning with SCIM 2.0

I'm trying SCIM 2.0 provisioning with Azure AD As premise, I have SCIM a server for my product and I'm implementing PATCH endpoints for use with Okta and Microsoft Azure AD. I'm done testing with Okta, so I'm trying with Azure AD now. I read this…
Daichi
  • 188
  • 1
  • 11
2
votes
2 answers

What is SCIM provisioning?

Can anybody please tell me, what is exactly mean by SCIM provisioning and how it works? What is difference between SCIM endpoint and SCIM client? Thanks in advance.
myprogram
  • 533
  • 1
  • 6
  • 11
2
votes
1 answer

OneLogin SCIM provisioning for Groups

I am building OneLogin SCIM Provisioner with SAML (Core Schema) app. I've created two controllers - Users and Groups. UsersController logic works perfectly - I can provision users and do all CRUD operations. But I am having issues with provisioning…
Loki
  • 21
  • 2
2
votes
1 answer

Onelogin login error: "Response not found"

I'm using SCIM Provisioner with SAML (Enterprise Schema) app. I got the following error when try to login to my website using the app: Error : OneLogin_Saml2_Error:-SAML Response not found, Only supported HTTP_POST Binding How can I fix this?
Shamon S
  • 117
  • 1
  • 7
2
votes
1 answer

How do I enable SCIM for primary user store? (wso2carbon)

I am working with wso2 carbon and am I trying to work though some of the SCIM examples, however, when I try to add a user to the store I get the following error: {"Errors":[{"code":"500","description":"Cannot add user through scim to user store .…
Speckpgh
  • 3,242
  • 1
  • 26
  • 42
2
votes
1 answer

WSO2 IS: SCIM API Update: Required attribute userName is missing in the SCIM Object

How to update user with PATCH, why it require userName (with PUT is the same)? curl -v -k --admin:admin -X PATCH -d '{"name":{"familyName":"Doe"}' \ --header "Content-Type:application/json"…
zarej
  • 863
  • 1
  • 10
  • 23
2
votes
1 answer

Using XACML to control access to a SCIM API

How can I apply XACML access control policies against the Identity Server's very own SCIM API? My idea is that I want the user to be able to access the user's SCIM endpoint (list endpoint), but it will only return the user itself as the only result…
2
votes
1 answer

Issue to delete a group by using SCIM in WSO2 IS 5.0

I am using IS 5.0 and I deleted a group named 'developer' in wso2 IS using SCIM service but entry not deleted from table IDN_SCIM_GROUP. when get the details of same user i got error {"Errors":[{"description":"Groups not found in the user store for…
Munees Majid
  • 692
  • 8
  • 21
2
votes
1 answer

Pingfederate SCIM Inbound provisioning

I have configured SCIM inbound provisioning in pingfederate 7.2.0 using Active Directory as an user store. But when I hit the URL exposed by ping to search for an user I get the following error on the browser- { …
Rana
  • 41
  • 5
1
vote
0 answers

Strategy on implementing SCIM v2 Service

So I was looking at implementing a SCIM v2 service to allow clients to maintain their users in an existing database. Currently we have an internal service that handles all of our user authentication/maintenance. I have done some reading on SCIM and…
David Sleep
  • 251
  • 2
  • 11
1
vote
2 answers

Where does AzureAD store the "id" attribute returned by a SCIM endpoint?

I am integrating AzureAD with a SCIM endpoint. So far integration seems to work: AzureAD sends "POST" requests to create users, then later it queries/updates users using their 'id'. Reminder from SCIM standard (RFC 7643): The 'id' is A unique…
Matthieu
  • 738
  • 6
  • 11
1
vote
0 answers

Onelogin role Rename doesn't work as expected in onelogin scim provisioning

I build SCIM Provisioning integration with OneLogin. I use role as user groups and rule to connect roles to the SCIM Provisioning App. When I rename role, I expect to get patch command for group rename, Something like: { "schemas": [ …
1
2
3
14 15