---
title: SCIM authentication
description: Authenticate SCIM requests with HTTP Basic authentication or OAuth 2.0 bearer tokens through the OAuthTokenHandler API on the PingDirectory and PingDirectoryProxy servers.
component: pingdirectory
version: 10.3
page_id: pingdirectory:managing_scim_11_and_20_servlet_extensions:pd_proxy_scim_authn
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/managing_scim_11_and_20_servlet_extensions/pd_proxy_scim_authn.html
llms_txt: https://docs.pingidentity.com/pingdirectory/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2024-07-15T00:00:00Z
page_aliases: ["pingdirectory_server_administration_guide:pd_ds_scim_authn.adoc"]
superseded_by: https://docs.pingidentity.com/pingdirectory/11.0/managing_scim_11_and_20_servlet_extensions/pd_proxy_scim_authn.html
---

# SCIM authentication

SCIM requests to the LDAP endpoints will support HTTP Basic Authentication and OAuth2 Authentication using a bearer token. There is existing support for this feature in the PingDirectory server and the PingDirectoryProxy server using the OAuthTokenHandler API (meaning through a Server SDK extension, which requires some technical work to implement).

Note that our implementation only supports the HTTP Authorization header for this purpose; we do not support the form-encoded body parameter or URI query parameter mechanisms for specifying the credentials or bearer token.