Clients can authenticate to the System for Cross-domain Identity Management (SCIM) extension using HTTP basic authentication and a bare UID value.
When a SCIM extension is hosted by a Directory Proxy Server, you must explicitly configure the server with the names of subordinate base distinguished names (DNs) to search.
Make sure to specify your deployment's subordinate base DN.
To configure the server with the names of subordinate base DNs, run the following
command on the Directory Proxy Server for every base DN that you can access using
$ bin/dsconfig set-root-dse-backend-prop \ --set subordinate-base-dn:dc=example,dc=com