Password considerations with SCIM

Because the System for Cross-domain Identity Management (SCIM) sync destination modifies entries using a full PUT method, special considerations need to be made for password attributes.

A Ping Identity SCIM server allows password attributes to be omitted from a change when they have not been modified by an operation. This prevents passwords from inadvertently being overwritten during the PUT operation, which does not include the password attribute. Ideally, other SCIM service providers will not wipe a password because a PUT request does not contain it. Check with the SCIM vendor to confirm this behavior before starting a SCIM sync pipe.