This configuration provides for two-way mapping of attributes. The first facilitates SCIM operations used to create and update records in the datastore (see Writing user information to the datastore). The second allows the same SCIM client to retrieve those records and have the attribute values mapped back to their corresponding designation in the client store (see Configuring a SCIM response).
The dual mapping is intended to provide greater flexibility, especially when needed for OGNL-expression transformations; for example, converting two attributes into one multivalued attribute and then back again.
SCIM-client requests must include authentication credentials, which you configure later on the
screen. The same credentials needed for SSO or other types of transactions enabled as part of this IdP connection, if configured, are also used for SCIM transactions.