--- title: Managing the SCIM 2.0 servlet extension description: The PingDirectory and PingDirectoryProxy servers provide a System for Cross-domain Identity Management (SCIM) servlet extension to move users between cloud-based Software-as-a-Service (SaaS) applications securely and quickly. SCIM is an alternative to LDAP that lets you provision identity data over HTTPS. component: pingdirectory version: 11.1 page_id: pingdirectory:managing_scim:pd_ds_scim_servlet_ext_mgmt canonical_url: https://docs.pingidentity.com/pingdirectory/11.1/managing_scim/pd_ds_scim_servlet_ext_mgmt.html llms_txt: https://docs.pingidentity.com/pingdirectory/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: 2026-08-17T00:00:00Z page_aliases: ["managing_scim_11_and_20_servlet_extensions:pd_ds_scim_servlet_ext_mgmt.adoc", "pingdirectory_server_administration_guide:pd_ds_manage_scim_servlet_exts.adoc", "pingdirectory_server_administration_guide:pd_proxy_scim_1_1_2_servlet_exts_mgmt.adoc", "pd_ds_scim_1_1_2_servlet_exts_mgmt.adoc", "pingdirectory_server_administration_guide:pd_ds_config_scim_2_server.adoc", "pingdirectory_server_administration_guide:pd_ds_manage_scim_2_servlet_ext.adoc", "pingdirectory_server_administration_guide:pd_ds_supported_scim_2_endpoints.adoc", "pd_proxy_manage_scim_2_servlet_ext.adoc", "pd_proxy_overview_scim_1_1_fund.adoc", "pd_proxy_identity_access_api.adoc", "pd_proxy_push_replace_before_you_begin.adoc", "pd_proxy_config_scim_1_1.adoc", "pd_proxy_config_scim_1_1_servlet_ext.adoc", "pd_proxy_config_scim_servlet_extension.adoc", "pd_proxy_verify_scim_1_1_servlet_ext_config.adoc", "pd_proxy_config_identity_access_api.adoc", "pd_proxy_monitor_scim_servlet_ext.adoc", "pd_proxy_config_adv_scim_1_1_ext_features.adoc", "pd_proxy_scim_1_1_schema.adoc", "pd_proxy_validate_updated_scim_schema.adoc", "pd_proxy_map_scim_resource_ids.adoc", "pd_proxy_use_pre_defined_transformations.adoc", "pd_proxy_map_ldap_entries_scim_ldap_api.adoc", "pd_proxy_scim_authn.adoc", "pd_proxy_scim_logging.adoc", "pd_proxy_scim_monitoring.adoc", "pd_proxy_create_scim_2_app.adoc", "pd_proxy_create_scim_1_1_app.adoc"] section_ids: configuration-endpoints: Configuration endpoints create-an-application: Create an application --- # Managing the SCIM 2.0 servlet extension The PingDirectory and PingDirectoryProxy servers provide a System for Cross-domain Identity Management (SCIM) *(tooltip: \
\

An application-level, HTTP-based protocol for provisioning and managing user identity information. SCIM supplies a common schema for representing users and groups and provides a REST API.\

\
)* servlet extension to move users between cloud-based Software-as-a-Service (SaaS) applications securely and quickly. SCIM is an alternative to LDAP that lets you provision identity data over HTTPS. The SCIM extension implements version 2.0 of the SCIM specification. Familiarize yourself with this specification to make efficient use of the SCIM extension and the SCIM SDK. Learn more in the [SCIM documentation](https://www.simplecloud.info). You can use the SCIM extension to do the following: * **Provision identities**: Through the API, you have access to the basic create, read, update, and delete functions, as well as other special functions. * **Provision groups**: SCIM also allows you to manage groups. * **Interoperate using a common schema**: SCIM provides a well-defined, platform-neutral user and group schema, as well as a simple mechanism to extend it. ## Configuration endpoints PingDirectory and PingDirectoryProxy support the SCIM 2.0 endpoints listed in the following table. | | | | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | * For topologies with PingDirectoryProxy, configure your SCIM settings on the PingDirectoryProxy server instead of on the backend PingDirectory servers. * There's a known issue with [dot notation support for SCIM 2.0 sub-attributes](../pingdatasync_server_administration_guide/pd_ds_scim_dot_notation.html). | | Endpoint | Description | Supported HTTP methods | | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- | | `/ServiceProviderConfig` | Provides metadata that indicates the server's authentication scheme (OAuth *(tooltip: \
\

A standard framework that enables an application (OAuth client) to obtain access tokens from an OAuth authorization server for the purpose of retrieving protected resources on a resource server.\

\
)* 2.0) and its support for features that are optional in the SCIM standard.This endpoint is a metadata endpoint and isn't subject to ACI restrictions. | GET | | `/Schemas` | Lists the SCIM schemas that are configured for use on the server, and defines the various attributes available to resource types.This endpoint is a metadata endpoint and isn't subject to ACI restrictions. | GET | | `/Schemas/` | Retrieves a specific SCIM schema, as specified by the schema ID.This endpoint is a metadata endpoint and isn't subject to ACI restrictions. | GET | | `/ResourceTypes` | Lists all of the SCIM resource types that are configured for use on the server. Clients can use this information to determine the endpoint, core schema, and extension schemas of any resource types that the server supports.This endpoint is a metadata endpoint and isn't subject to ACI restrictions. | GET | | `/ResourceTypes/` | Retrieves a specific SCIM resource type, as specified by its ID.This endpoint is a metadata endpoint and isn't subject to ACI restrictions. | GET | | `/` | Creates a new resource (POST), or lists and filters resources (GET). | GET, POST | | `//.search` | Lists and filters resources.This is used as an alternative to passing query parameters in the URL. | POST | | `//` | Retrieves a single resource (GET), modifies a single resource (PUT, PATCH), or deletes a single resource (DELETE). | GET, PUT, PATCH, DELETE | ## Create an application To create a SCIM 2.0 application, you must [download the SCIM 2 SDK](https://github.com/pingidentity/scim2). The SCIM 2 SDK is a pre-packaged collection of libraries and extensible classes that provides developers with a simple, concrete API to interact with a SCIM service provider.