Questions tagged [scim]

The System for Cross-domain Identity Management (SCIM) specification is designed to make managing user identities in cloud-based applications and services easier.

scim
Filter by
Sorted by
Tagged with
5 votes
2 answers
832 views

Azure AD: how to key users when using OIDC and SCIM

I'm in the process of updating an internal app with OIDC and SCIM with the goal of having sign-on and provisioning driven by Azure AD. Looking at the Azure docs for OIDC and SCIM, there seems to be a ...
Matt R. Wilson's user avatar
0 votes
1 answer
48 views

Distinguish between requests coming from Azure and Okta

During provisioning phase, what's a reliable way to distinguish between requests coming from Azure ActiveDirectory and Okta? We're implementing SCIM and SSO in our app. To aid user UX, we would like ...
oldhomemovie's user avatar
  • 14.9k
0 votes
0 answers
1k views

How to map Azure User Groups to Salesforce Permissions Sets (or PS Groups) & Public Groups

We have Azure AD sync'ing user accounts to Salesforce - this is working fine. In Salesforce we have a few custom 'Profiles'. And in Azure AD > Enterprise Apps > Salesforce > Users & ...
DDIT's user avatar
  • 1
0 votes
1 answer
404 views

SCIM API Filtering Users on meta.LastModifiedDate

I am using following filter with "Beyond Insight" SCIM API users endpoint, BaseURL/v2/Users?filter=meta.lastModified le "2011-05-13T04:42:34Z" I am getting "search field is ...
Rayapati's user avatar
1 vote
2 answers
478 views

"Test Connection" failed from Azure AD for SCIMReferenceCode

I am learning SCIM and I wanted to try a few things out locally so I can better understand the concepts. I downloaded the SCIM reference code available here https://github.com/AzureAD/...
sanny_gomes's user avatar
0 votes
1 answer
373 views

How to list users present in a group using SCIM implementation

I am trying to list users present in a particular AWS SSO group, but am not able to do it. I am using this If anyone knows any workaround this, would be a great help.
user18148705's user avatar
2 votes
1 answer
1k views

How to configure SCIM provisioning for Azure AD and Databricks via terraform?

TL;DR: Is it possible to have terraform perform the Microsoft Graph steps for SCIM provisioning for Azure AD and Databricks? I am trying to configure automatic SCIM provisioning for Databricks so that ...
CJA's user avatar
  • 157
1 vote
1 answer
150 views

Azure AD provisioning requires two runs to succeed with custom app

We've created an application using SCIM 2 SDK from PingIdentity for provisioning with Azure AD. Custom mapping is set up and working. However, when the user is CREATED, all of the fields are included ...
Kevin Malone's user avatar
0 votes
1 answer
76 views

Unable to access Smartsheet SCIM APIs

I have a Smartsheet enterprise account with system admin privileges. But, when I try to access the SCIM API(https://scim.smartsheet.com/v2/Users) getting the following error: { "schemas": [ &...
Godson John's user avatar
3 votes
1 answer
4k views

Doc about SCIM implementation for Google Workspace?

I need to develop a SCIM endpoint for Azure and Google Workspace. Azure and Okta have a good technical documentation about it, but I can't find anything on the Google side. All I can find is some help ...
BenoitD's user avatar
  • 525
0 votes
1 answer
127 views

SCIM 2.0 and external AD groups

We implemented SCIM for an enterprise app and it is working fine. We were told that we could add external AD groups to allow our partners users to be able to access the app as well. For example, ...
James Craig's user avatar
0 votes
1 answer
2k views

AzureAD Group Provisioning to ServiceNow - Cannot change group details in ServiceNow due SYSID being stored

I am trying to understand AzureAD Provisioning and ServiceNow. Group provisioning is OOTB and set to map on the Group NAME field, and it does. However, AzureAD is storing the ServiceNow ID for the ...
JockTheKiwi's user avatar
0 votes
2 answers
830 views

How can I add an Alias attribute to guests in my Azure AD?

I have a SaaS application that I use SCIM user provisioning with and I want my guests to be fully controlled through my AD. I can map any field from Azure AD to my SaaS app so I want to create aliased ...
Ciarán Flynn's user avatar
0 votes
1 answer
256 views

Azure SCIM provisioning of only AD groups

In a youtube movie about Azure AD integration i saw the SCIM provisioning screen come by. On this screen its possible to set the mappings and to enable/disable Azure AD Users or Azure AD groups ...
user18037830's user avatar
0 votes
1 answer
210 views

Resolving SystemForCrossDomainIdentityManagementBadResponse

I have implemented this SCIM reference code in our application. My implemented code did pass all the test collection of Users present in this postman link. My SCIM Api was also accepted by Azure as ...
Rishabh Sharma's user avatar
0 votes
1 answer
1k views

Authorization - mapping a Azure AD group to a Snowflake role

We implemented SSO on Snowflake and with SCIM, we're able to provision users in Snowflake Now, I want it to work like SQL Server authentication where I can add users to the same AD group and create a ...
user avatar
1 vote
1 answer
1k views

Microsoft Azure AD SCIM endpoints

Can someone tell me how to provision Microsoft Azure AD users via SCIM to my own application? The scenario is as follows: I have some users in Azure Active Directory and want to sync them with my own ...
b_m_l's user avatar
  • 13
0 votes
1 answer
59 views

Why is there no actual schema for the SCIM core user?

Simple question here... According to the SCIM specification (https://datatracker.ietf.org/doc/html/rfc7643) and the seriously limited documentation I could find, there is a "core user schema"...
JeneralJames's user avatar
0 votes
0 answers
91 views

Can't login to WSO2 using API after changing password using user update API in patch method

I created a user using the API http://localhost:9443/wso2/scim/Users. Then I could generate access token for login using the http://localhost:9443/wso2/oauth2/token?grant_type=password&username={...
JISHNU K's user avatar
0 votes
1 answer
117 views

Is the SCIM user ID the same as an IdP's setting for a user ID if SCIM is not enabled?

Say you have an IdP that can act as a SCIM server (WSO2 is one -- I would be interested to know if there are others), but SCIM is not currently enabled and it is up and running for a while with user ...
knokej's user avatar
  • 71
0 votes
2 answers
790 views

How to retrieve groups for a specific user using the AWS SSO SCIM API?

I am trying to use the AWS SSO SCIM API in order to retrieve the AWS SSO groups for a particular user. Looking at the documentation https://docs.aws.amazon.com/singlesignon/latest/developerguide/...
Georgios F.'s user avatar
2 votes
1 answer
47 views

Invoking groups SCIM API

I am using WSO2 IDM server and working on using SCIM API's available. When I invoked the get groups SCIM API https://localhost:9443/wso2/scim/Groups, I am getting error in response { "Errors&...
Arun Guilal's user avatar
0 votes
2 answers
574 views

Okta scim user automatic provision of user failed

I configured okta snowflake SSO. I assigned users as well. I configures scim which has permission to create users, deactivate users, sync password. After i configure scim i am having errors for ...
Karikaaalan's user avatar
3 votes
1 answer
1k views

Set up auto provisioning for custom SAML Web app in Google workspace

I am trying to set up a custom SAML Web app with auto provisioning in my google admin. I am able to create an custom SAML Web app but the auto provisioning feature is not available. As per this ...
Subhrajyoti Das's user avatar
2 votes
1 answer
884 views

Linking External Identity Users With Existing Users

I'm adding an external identity provider, Azure multi-tenant, as a login option. I have local accounts right now and they know nothing about Azure AD users. I want to create an Azure Enterprise App ...
Beastwood's user avatar
  • 466
5 votes
1 answer
3k views

Configuring the Azure AD Databricks SCIM application with Terraform

I am trying to create and configure the Azure Databricks SCIM Provisioning Connector, so I can provision users in my Databricks workspace from AAD. Following these instructions, I can get it to work ...
Xophmeister's user avatar
  • 9,072
2 votes
2 answers
449 views

How to remove a value of multi-valued SCIM 2.0 sub-attribute?

I have a complex SCIM attribute that looks like follows: "myattr1": { "subattr1": 5, "subattr2": [1, 2, 3] } I want to modify this to become "myattr1": { ...
Rahul's user avatar
  • 993
2 votes
2 answers
704 views

SCIM Google Workspace Snowflake

Is someone already configure Google Workspace working with Snowflake and has user automatically created (as Okta can purpose) Thanks for the help
adbodo's user avatar
  • 21
0 votes
0 answers
527 views

Is there a way to concatenate the query parameters in a GET API call?

I am trying to hit a GET API call using SCIM protocol with multiple filter query parameters like firstName, lastName. I want to have another query parameter which can combine firstName and lastName. E....
user601236's user avatar
0 votes
1 answer
196 views

GET SCIM GROUPS only returns synthetic_group in snowflake

I am trying to list all the SCIM groups in snowflake but I only get synthetic_group { "schemas" : [ "urn:ietf:params:scim:api:messages:2.0:ListResponse" ], "Resources"...
user1772390's user avatar
1 vote
2 answers
2k views

Azure AD SCIM Attribute Mapping - Group Membership Expression

I would like to create an expression for SCIM attribute mapping in Azure AD to pass a value to an attribute of the receiving application based on the user membership to a specific AD group. The below ...
Mike-S122's user avatar
  • 209
0 votes
0 answers
126 views

Okta scim provisioning

I have implemented the scim endpoints. But I don't know how to synchronization the scim endpoints in okta. Can any one help how we can do provisiong and what we need to provide for scim connector base ...
mounika payyavula's user avatar
1 vote
1 answer
387 views

Sending group custom attributes through the Okta SCIM app

Trying to create a SCIM application in Okta that would provision both users and groups. Users seem to work as expected and I am able to push custom attributes for users to our app and also do the ...
Roxana Roman's user avatar
  • 1,012
0 votes
3 answers
1k views

AD provisioning says that "A required attribute is missing from a response", but it does exist in the response

I'm working on implementing SCIM 2.0, as I need to use to to provision users in my system that are stored in Azure AD. I have set it up and when I try to manually provision a user, I get this error: ...
leheinlein's user avatar
0 votes
1 answer
89 views

Using SCIM, can my app ask the IdP whether the user is part of a group?

The usual use of SCIM seems to be that user information (provisioning) can flow from the IdP to the app (aka, service provider). But what if the app has a question for the IdP, like: "what is ...
knokej's user avatar
  • 71
1 vote
0 answers
2k views

AWS SSO SCIM Access token expiry notification

Has anybody found a way to automatically be notified when the SCIM access token expiry date is approaching? This is to help with using an external identity provider for the the SSO with Azure AD. ...
DevEng user's user avatar
0 votes
1 answer
85 views

Can /ME endpoint be extended in SCIM

When a user hits the /Me endpoint as per SCIM RFC 7644 https://datatracker.ietf.org/doc/html/rfc7644#section-3.11 the information returned is following "id": "<id>", &...
user1482100's user avatar
0 votes
1 answer
218 views

Role assignment using SCIM

How does one assign application roles (like USER, MANAGER, ADMIN) through SCIM? Okta is managing the user directory and the application is currently creating, updating and deactivating users when the ...
rablentain's user avatar
  • 6,435
5 votes
2 answers
1k views

Okta Snowflake Role creation

I am new to this okta snowflake. I am using scim. After integration, I am trying to create the role in the okta, or at least assign the role to the user from the okta to the snowflake. In the ...
Karikaaalan's user avatar
0 votes
1 answer
354 views

Use SCIM API to send data from Azure AD to another endpoint

I am trying to recreate a model to use SCIM to send data from an Azure AD to an endpoint. Could someone please help me to understand the process and how this can be accomplished?
telarewa's user avatar
0 votes
1 answer
384 views

Does Okta send group membership removal when user is assigned to app via a group?

Setup: Group in Okta that has a user added SCIM app in Okta that has the group assigned and pushed In the above setup, when we remove the user from the group, we don't receive a SCIM PATCH request ...
Blair Lunceford's user avatar
0 votes
0 answers
61 views

Is there any way to map two different types (string and array of string) in a single field in C#?

First json data coming from request body. "Operations": [ { "op": "Replace", "path": "displayName", &...
Ashish Vishwakarma's user avatar
0 votes
1 answer
295 views

How can we customize SCIM query filter in Azure?

enter image description here Azure is using userName to apply filter. Can anyone suggest if there is any way to customize this filter? I want to use userName + externalId to be passed in the filter as ...
Ashish Vishwakarma's user avatar
0 votes
1 answer
714 views

How to update a User's Current Status using the SCIM API?

I'm attempting to update a User's Current Status field using the SCIM API. I'm aware this field can be updated using the users.profile.set POST API. How can I update the profile block of a user object ...
charudut's user avatar
1 vote
1 answer
3k views

How are Azure isSoftDelete false/true values determined?

When deprovisioning users, we are referencing isSoftDelete to active in our attribute mapping. When using the following in the mapping, and then removing a user from the group, it isn't deactivating ...
MorganF's user avatar
  • 11
0 votes
1 answer
75 views

Curity SCIM group endpoint

It is mentioned on their doc here It would also be possible to create a group in the same way but then define the group schema instead of the user schema. However, it seems um-api can only be used ...
FoMM's user avatar
  • 53
0 votes
1 answer
155 views

Provision functional/delegated/group accounts from Azure AD using SCIM

we use SCIM 2.0 to provision accounts from a source, like AD, to our app. However, increasingly customers move to AzureAD. Provision 'normal' acounts from Azure AD is supported and is straight forward....
Rick Goud's user avatar
0 votes
0 answers
598 views

WSO2 SCIM2 APIs always return 401 Unauthorized

I'm trying to create a new carbon user with wso2 v3.2.0 installed on docker, using scim2 endpoints. When I try to issue a POST request on /scim2/Users endpoint, I always get a 401 Unauthorized ...
hubfix's user avatar
  • 49
0 votes
1 answer
157 views

Repeating Create requests for Groups : Azure AD SCIM Provisioning

We have created a SCIM endpoint for our custom application connecting to Azure AD's SCIM client. We have created an Enterprise Application for our custom application and successfully connected the ...
Jarlsberg's user avatar
0 votes
1 answer
297 views

unable to get scim 2.0 wso2 is api for get Roles under secondary user store

I have a secondary userstore (JDBC) created in wso2 IS 5.11.0. 2 roles are added under the userstore. I am using the below SCIM 2.0 api to get the roles. https://{IS_IP}:(PORT}/t/carbon.super/scim2/...
nivedhav's user avatar

1
2
3 4 5
7