Managing the SCIM 2.0 servlet extension
The PingDirectory and PingDirectoryProxy servers provide a System for Cross-domain Identity Management (SCIM) servlet extension to move users between cloud-based Software-as-a-Service (SaaS) applications securely and quickly. SCIM is an alternative to LDAP that lets you provision identity data over HTTPS.
The SCIM extension implements version 2.0 of the SCIM specification. Familiarize yourself with this specification to make efficient use of the SCIM extension and the SCIM SDK. Learn more in the SCIM documentation.
You can use the SCIM extension to do the following:
-
Provision identities: Through the API, you have access to the basic create, read, update, and delete functions, as well as other special functions.
-
Provision groups: SCIM also allows you to manage groups.
-
Interoperate using a common schema: SCIM provides a well-defined, platform-neutral user and group schema, as well as a simple mechanism to extend it.
Configuration endpoints
PingDirectory and PingDirectoryProxy support the SCIM 2.0 endpoints listed in the following table.
|
| Endpoint | Description | Supported HTTP methods |
|---|---|---|
|
Provides metadata that indicates the server’s authentication scheme (OAuth 2.0) and its support for features that are optional in the SCIM standard. This endpoint is a metadata endpoint and isn’t subject to ACI restrictions. |
GET |
|
Lists the SCIM schemas that are configured for use on the server, and defines the various attributes available to resource types. This endpoint is a metadata endpoint and isn’t subject to ACI restrictions. |
GET |
|
Retrieves a specific SCIM schema, as specified by the schema ID. This endpoint is a metadata endpoint and isn’t subject to ACI restrictions. |
GET |
|
Lists all of the SCIM resource types that are configured for use on the server. Clients can use this information to determine the endpoint, core schema, and extension schemas of any resource types that the server supports. This endpoint is a metadata endpoint and isn’t subject to ACI restrictions. |
GET |
|
Retrieves a specific SCIM resource type, as specified by its ID. This endpoint is a metadata endpoint and isn’t subject to ACI restrictions. |
GET |
|
Creates a new resource (POST), or lists and filters resources (GET). |
GET, POST |
|
Lists and filters resources. This is used as an alternative to passing query parameters in the URL. |
POST |
|
Retrieves a single resource (GET), modifies a single resource (PUT, PATCH), or deletes a single resource (DELETE). |
GET, PUT, PATCH, DELETE |
Create an application
To create a SCIM 2.0 application, you must download the SCIM 2 SDK. The SCIM 2 SDK is a pre-packaged collection of libraries and extensible classes that provides developers with a simple, concrete API to interact with a SCIM service provider.