Questions tagged [scim]
The System for Cross-domain Identity Management (SCIM) specification is designed to make managing user identities in cloud-based applications and services easier.
252
questions
0
votes
2
answers
19
views
How can I add an Alias attribute to guests in my Azure AD?
I have a SaaS application that I use SCIM user provisioning with and I want my guests to be fully controlled through my AD. I can map any field from Azure AD to my SaaS app so I want to create aliased ...
0
votes
1
answer
13
views
Azure SCIM provisioning of only AD groups
In a youtube movie about Azure AD integration i saw the SCIM provisioning screen come by. On this screen its possible to set the mappings and to enable/disable Azure AD Users or Azure AD groups ...
0
votes
1
answer
37
views
Resolving SystemForCrossDomainIdentityManagementBadResponse
I have implemented this SCIM reference code in our application.
My implemented code did pass all the test collection of Users present in this postman link. My SCIM Api was also accepted by Azure as ...
0
votes
1
answer
72
views
Authorization - mapping a Azure AD group to a Snowflake role
We implemented SSO on Snowflake and with SCIM, we're able to provision users in Snowflake
Now, I want it to work like SQL Server authentication where I can add users to the same AD group and create a ...
0
votes
1
answer
60
views
Microsoft Azure AD SCIM endpoints
Can someone tell me how to provision Microsoft Azure AD users via SCIM to my own application?
The scenario is as follows:
I have some users in Azure Active Directory and want to sync them with my own ...
0
votes
1
answer
24
views
Why is there no actual schema for the SCIM core user?
Simple question here... According to the SCIM specification (https://datatracker.ietf.org/doc/html/rfc7643) and the seriously limited documentation I could find, there is a "core user schema"...
0
votes
0
answers
22
views
How does the SCIM 'externalId' work if multiple apps/domains cause there to be more than two IDs for the same person?
SCIM makes an optional 'externalId' attribute available for clients which have a different value for a user's ID than what the SCIM server authoritatively associates with the same user. What if we ...
0
votes
0
answers
47
views
Can't login to WSO2 using API after changing password using user update API in patch method
I created a user using the API http://localhost:9443/wso2/scim/Users. Then I could generate access token for login using the http://localhost:9443/wso2/oauth2/token?grant_type=password&username={...
0
votes
1
answer
25
views
Is the SCIM user ID the same as an IdP's setting for a user ID if SCIM is not enabled?
Say you have an IdP that can act as a SCIM server (WSO2 is one -- I would be interested to know if there are others), but SCIM is not currently enabled and it is up and running for a while with user ...
0
votes
0
answers
42
views
How to create sso users by simulating a SCIM server?
I want to automatically create sso users. From what I understand there is no way to do this programatically (correct me if I'm wrong) but it is possible to do by simulating an SCIM Server as described ...
0
votes
2
answers
161
views
How to retrieve groups for a specific user using the AWS SSO SCIM API?
I am trying to use the AWS SSO SCIM API in order to retrieve the AWS SSO groups for a particular user.
Looking at the documentation https://docs.aws.amazon.com/singlesignon/latest/developerguide/...
2
votes
1
answer
21
views
Invoking groups SCIM API
I am using WSO2 IDM server and working on using SCIM API's available.
When I invoked the get groups SCIM API https://localhost:9443/wso2/scim/Groups, I am getting error in response
{
"Errors&...
0
votes
0
answers
46
views
Okta scim user automatic provision of user failed
I configured okta snowflake SSO. I assigned users as well. I configures scim which has permission to create users, deactivate users, sync password. After i configure scim i am having errors for ...
0
votes
1
answer
140
views
Set up auto provisioning for custom SAML Web app in Google workspace
I am trying to set up a custom SAML Web app with auto provisioning in my google admin. I am able to create an custom SAML Web app but the auto provisioning feature is not available. As per this ...
0
votes
1
answer
101
views
Linking External Identity Users With Existing Users
I'm adding an external identity provider, Azure multi-tenant, as a login option. I have local accounts right now and they know nothing about Azure AD users.
I want to create an Azure Enterprise App ...
2
votes
1
answer
349
views
Configuring the Azure AD Databricks SCIM application with Terraform
I am trying to create and configure the Azure Databricks SCIM Provisioning Connector, so I can provision users in my Databricks workspace from AAD.
Following these instructions, I can get it to work ...
0
votes
0
answers
9
views
Does massl connection setup be used to access Salesforce SCIM v2 APIs?
I have installed the managed package from salesforce for SCIM v2.
And could access SCIM v2 APIs from external system/postman.
The requirement will be to set up a mutually authenticated ssl connection ...
1
vote
2
answers
72
views
How to remove a value of multi-valued SCIM 2.0 sub-attribute?
I have a complex SCIM attribute that looks like follows:
"myattr1": {
"subattr1": 5,
"subattr2": [1, 2, 3]
}
I want to modify this to become
"myattr1": {
...
2
votes
1
answer
142
views
SCIM Google Workspace Snowflake
Is someone already configure Google Workspace working with Snowflake and has user automatically created (as Okta can purpose)
Thanks for the help
0
votes
0
answers
79
views
Is there a way to concatenate the query parameters in a GET API call?
I am trying to hit a GET API call using SCIM protocol with multiple filter query parameters like firstName, lastName.
I want to have another query parameter which can combine firstName and lastName.
E....
0
votes
1
answer
63
views
GET SCIM GROUPS only returns synthetic_group in snowflake
I am trying to list all the SCIM groups in snowflake but I only get synthetic_group
{
"schemas" : [ "urn:ietf:params:scim:api:messages:2.0:ListResponse" ],
"Resources"...
0
votes
2
answers
191
views
Azure AD SCIM Attribute Mapping - Group Membership Expression
I would like to create an expression for SCIM attribute mapping in Azure AD to pass a value to an attribute of the receiving application based on the user membership to a specific AD group.
The below ...
0
votes
0
answers
27
views
Okta scim provisioning
I have implemented the scim endpoints. But I don't know how to synchronization the scim endpoints in okta. Can any one help how we can do provisiong and what we need to provide for scim connector base ...
1
vote
1
answer
119
views
Sending group custom attributes through the Okta SCIM app
Trying to create a SCIM application in Okta that would provision both users and groups.
Users seem to work as expected and I am able to push custom attributes for users to our app and also do the ...
0
votes
3
answers
57
views
AD provisioning says that "A required attribute is missing from a response", but it does exist in the response
I'm working on implementing SCIM 2.0, as I need to use to to provision users in my system that are stored in Azure AD. I have set it up and when I try to manually provision a user, I get this error:
...
0
votes
1
answer
36
views
Using SCIM, can my app ask the IdP whether the user is part of a group?
The usual use of SCIM seems to be that user information (provisioning) can flow from the IdP to the app (aka, service provider). But what if the app has a question for the IdP, like: "what is ...
1
vote
0
answers
147
views
AWS SSO SCIM Access token expiry notification
Has anybody found a way to automatically be notified when the SCIM access token expiry date is approaching? This is to help with using an external identity provider for the the SSO with Azure AD. ...
0
votes
1
answer
75
views
Can /ME endpoint be extended in SCIM
When a user hits the /Me endpoint as per SCIM RFC 7644 https://datatracker.ietf.org/doc/html/rfc7644#section-3.11
the information returned is following
"id": "<id>",
&...
0
votes
0
answers
160
views
SCIM filter-query
I've recently added new filters to the SCIM endpoint:
givenName = /scim/2/users?filter=givenName eq "Test"
familyName = /scim/2/users?filter=familyName eq "Osteron"
However, ...
0
votes
1
answer
57
views
Role assignment using SCIM
How does one assign application roles (like USER, MANAGER, ADMIN) through SCIM? Okta is managing the user directory and the application is currently creating, updating and deactivating users when the ...
3
votes
2
answers
381
views
Okta Snowflake Role creation
I am new to this okta snowflake. I am using scim. After integration, I am trying to create the role in the okta, or at least assign the role to the user from the okta to the snowflake. In the ...
0
votes
1
answer
115
views
Use SCIM API to send data from Azure AD to another endpoint
I am trying to recreate a model to use SCIM to send data from an Azure AD to an endpoint.
Could someone please help me to understand the process and how this can be accomplished?
Thank you!
0
votes
1
answer
120
views
Does Okta send group membership removal when user is assigned to app via a group?
Setup:
Group in Okta that has a user added
SCIM app in Okta that has the group assigned and pushed
In the above setup, when we remove the user from the group, we don't receive a SCIM PATCH request ...
0
votes
0
answers
43
views
Is there any way to map two different types (string and array of string) in a single field in C#?
First json data coming from request body.
"Operations": [
{
"op": "Replace",
"path": "displayName",
&...
0
votes
1
answer
59
views
How can we customize SCIM query filter in Azure?
enter image description here
Azure is using userName to apply filter. Can anyone suggest if there is any way to customize this filter? I want to use userName + externalId to be passed in the filter as ...
0
votes
1
answer
228
views
How to update a User's Current Status using the SCIM API?
I'm attempting to update a User's Current Status field using the SCIM API. I'm aware this field can be updated using the users.profile.set POST API. How can I update the profile block of a user object ...
0
votes
1
answer
196
views
How are Azure isSoftDelete false/true values determined?
When deprovisioning users, we are referencing isSoftDelete to active in our attribute mapping. When using the following in the mapping, and then removing a user from the group, it isn't deactivating ...
0
votes
1
answer
56
views
Curity SCIM group endpoint
It is mentioned on their doc here
It would also be possible to create a group in the same way but then define the group schema instead of the user schema.
However, it seems um-api can only be used ...
0
votes
1
answer
64
views
Provision functional/delegated/group accounts from Azure AD using SCIM
we use SCIM 2.0 to provision accounts from a source, like AD, to our app.
However, increasingly customers move to AzureAD. Provision 'normal' acounts from Azure AD is supported and is straight forward....
0
votes
0
answers
219
views
WSO2 SCIM2 APIs always return 401 Unauthorized
I'm trying to create a new carbon user with wso2 v3.2.0 installed on docker, using scim2 endpoints.
When I try to issue a POST request on /scim2/Users endpoint, I always get a 401 Unauthorized ...
0
votes
0
answers
38
views
SCIM Provisioner w/SAML (SCIM v2 w/OAuth & Scope) Application
I was wondering if someone knows how often those this Application on OneLogin platform does a call to retrieve a new Access Token.
I'm trying to use this Application with a SCIM API that has an ...
0
votes
1
answer
55
views
Repeating Create requests for Groups : Azure AD SCIM Provisioning
We have created a SCIM endpoint for our custom application connecting to Azure AD's SCIM client. We have created an Enterprise Application for our custom application and successfully connected the ...
0
votes
1
answer
95
views
unable to get scim 2.0 wso2 is api for get Roles under secondary user store
I have a secondary userstore (JDBC) created in wso2 IS 5.11.0.
2 roles are added under the userstore.
I am using the below SCIM 2.0 api to get the roles.
https://{IS_IP}:(PORT}/t/carbon.super/scim2/...
1
vote
1
answer
49
views
Can we use the "request" returnable property of SCIM attribute even in GET request?
The SCIM RFC 7643 section-7 describes the schema definitions, the "returned" expects one of the following as the value:-
always
never
default - The attribute is returned by default in all ...
2
votes
0
answers
93
views
Azure AD provisioning sends SCIM replace operation when adding user to group
I have user and group provisioning set up for an enterprise application in Azure AD. I have a SCIM endpoint setup in my application to consume the SCIM requests from Azure AD. I added this feature ...
1
vote
1
answer
208
views
How to delete user by email id using azure SCIM api in databricks?
I need to know if there is a way to delete a user from databricks using email only using SCIM api? As of now I can see it can only delete user by ID which means I need to first retrive the ID of the ...
0
votes
0
answers
185
views
Force sending delete requests in AzureAD SCIM
I am provisioning a SCIM client from AzureAD. Create/update works fine. When a user is removed from AzureAD recycle bin (hard-delete), I also receive delete requests.
Now I have issues with soft-...
0
votes
1
answer
56
views
How do I create new resource once SCIM is integrated with my service provider?
I'm a SCIM newbie.
In SCIM work flow, I'm just curious how to create new user on service provider side.
If I create new user into local user table on service provider side, and then send a SCIM post ...
0
votes
0
answers
26
views
SCIM OneLogin Role variable
I'm looking at https://developers.onelogin.com/scim/define-user-schema, however, there is no specification on how to access the roles variable of the user.
How can I access it under the schema defined ...
0
votes
1
answer
98
views
Sample java code for adding extension attributes using SCIM for Wso2
I am new to Wso2 IS , currently I am working on adding new extended attributes into WSO2 for user creation however I could not find any example which shows how to do that using Java.
The one I see ...