Clients can authenticate to the System for Cross-domain Identity Management (SCIM) extension using HTTP basic authentication and a bare UID value.
When a SCIM extension is hosted by a PingDirectoryProxy server, you must explicitly configure the server with the names of subordinate base distinguished names (DNs) to search.
Make sure to specify your deployment's subordinate base DN.
To configure the server with the names of subordinate base DNs, run the following
command on the PingDirectoryProxy server for every base DN
that you can access using SCIM.
$ bin/dsconfig set-root-dse-backend-prop \ --set subordinate-base-dn:dc=example,dc=com