{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"SCIM Protocol","description":"Okta Developer API Reference","siteUrl":"https://okta-developer.pixtulate.com","keywords":"okta, api reference docs","lang":"en-US"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"scim-protocol","__idx":0},"children":["SCIM Protocol"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The System for Cross-domain Identity Management (SCIM) specification is a provisioning protocol to create, retrieve, update, and deactivate users and groups between Okta and downstream apps and directories."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more background on the SCIM protocol, how it works, and particular use cases, see our topic on ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://okta-developer.pixtulate.com/docs/concepts/scim/"},"children":["Understanding SCIM"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For references on implementing the SCIM REST API with Okta and your app, see the following links that contain all the information relevant to your specific SCIM version:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/openapi/okta-scim/guides/scim-20"},"children":["Okta and SCIM Version 2.0"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/openapi/okta-scim/guides/scim-11"},"children":["Okta and SCIM Version 1.1"]}]}]},{"$$mdtype":"Tag","name":"blockquote","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Note:"]}," Okta currently supports both Version 2.0 and Version 1.1 of the SCIM protocol specifications. If you haven't yet implemented SCIM, Okta recommends that you implement SCIM 2.0."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To work with Okta, your SCIM app must use RESTful endpoints constructed according to either the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://tools.ietf.org/html/rfc7644"},"children":["V2.0"]}," or ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://scim.cloud/specs/draft-scim-api-01.html"},"children":["V1.1"]}," SCIM protocol specification. The URL of your SCIM server is plugged into the SCIM integration in your Okta org. Okta then communicates with the endpoints through a series of HTTP requests and responses using POST, GET, PUT, and PATCH operations."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"differences-between-versions-20-and-11","__idx":1},"children":["Differences between versions 2.0 and 1.1"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Different namespaces mean that Version 2.0 URIs aren't backward compatible with 1.1:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["V2.0:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:ietf:params:scim:schemas:core:2.0:User"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["V1.1:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:scim:schemas:core:1.0"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:scim:schemas:extension:enterprise:1.0"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The service provider configuration endpoint has no ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["s"]}," at the end of the SCIM 2.0 endpoint:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["V2.0:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/ServiceProviderConfig"]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["V1.1:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/ServiceProviderConfigs"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["V2.0 also has the the following differences:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Supports using JSON PATCH operations ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://tools.ietf.org/html/rfc7644#section-3.5.2"},"children":["Section 3.5.2"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Requires that the response includes the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://tools.ietf.org/html/rfc7644#section-3.12"},"children":["errors in a JSON body"]},", using the error response schema ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:ietf:params:scim:api:messages:2.0:Error"]}]}]}]}]}]},"headings":[{"value":"SCIM Protocol","id":"scim-protocol","depth":1},{"value":"Differences between versions 2.0 and 1.1","id":"differences-between-versions-20-and-11","depth":3}],"frontmatter":{"title":"SCIM Protocol","meta":[{"name":"description","content":"Your SCIM API must support specific SCIM API endpoints to work with Okta. Those endpoints and their explanations are detailed here."}],"seo":{"title":"SCIM Protocol"}},"lastModified":"2025-02-07T21:02:56.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/openapi/okta-scim/guides","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}