When a SCIM extension is hosted by a PingDirectoryProxy server, you must explicitly configure the server with the names of subordinate base distinguished names (DNs) to search.

Note:

Make sure to specify your deployment's subordinate base DN.

  • To configure the server with the names of subordinate base DNs, run the following command on the PingDirectoryProxy server for every base DN that you can access using SCIM.
    $ bin/dsconfig set-root-dse-backend-prop \
      --set subordinate-base-dn:dc=example,dc=com