Bereitstellung via SCIM v2

Offizielles SCIM Protokoll: https://tools.ietf.org/html/rfc7644

SCIM Konfiguration anfragen:

GET /SCIM/v2/ServiceProviderConfig

Verfügbare Ressource-Typen anfragen (with links to their schemas):

GET /SCIM/v2/ResourceTypes

(individuelle) Ressource-Typen Schemata anfragen:

GET /SCIM/v2/Schemas

Schema für Ressource-Type anfragen User:

GET /SCIM/v2/ResourceTypes/urn:ietf:params:scim:schemas:core:2.0:User

Nutzer mit externalId "ABC123" anfragen:

GET /SCIM/v2/Users?filter=externalId+eq+%22ABC123%22

Gruppe "Sales" anfragen ohne deren Mitglieder aufzulisten:

GET /SCIM/v2/Groups?excludedAttributes=members&filter=displayName+eq+%22Sales%22

Neuen Nutzer hinzufügen (managerId ist gleich externalId):

POST /SCIM/v2/Users

CODE

{
	"schemas": ["urn:scim:schemas:core:1.0", "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"],
	"userName": "scim_test",
	"externalId": "scim0001",
	"name": {
		"familyName": "Jones",
		"givenName": "Taylor"
	},
	"emails": [
		{
			"value": "jones@scim.com",
			"type": "work",
			"primary": true
		}
	],
	"locale": "en_US",
	"active":true,
	"password":"t1meMa$heen",
	"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
		"employeeNumber":   "701984",
		"costCenter":       "4130",
		"organization":     "Universal Studios",
		"division":         "Theme Park",
		"department":       "1000",
		"manager": {
			"managerId":    "U0XE15NHQ",
			"displayName":  "Mary Johnes"
		}
	}
}

Teile von Nutzereigenschaften bearbeiten (Familienname und E-Mail deaktivieren):

PATCH/SCIM/v2/Users/6639add5-fa72-460b-afbd-a681bc6b579e

CODE

{
	"schemas":["urn:ietf:params:scim:api:messages:2.0:PatchOp"],
	"Operations":[
		{
			"op":"replace",
			"path":"active",
			"value": "false"
		},{
			"op":"replace",
			"path":"familyName",
			"value": "Janes"
		},{
			"op":"replace",
			"path":"emails[email.type eq 'work']",
			"value": "jack@scim.com"
		}
	]
}

Vollständiges Nutzerprofil aktualisieren:
PUT /SCIM/v2/Users

CODE

{
	"schemas": [
		"urn:scim:schemas:core:1.0"
	],
	"userName": "scim_test",
	"externalId": "scim0001",
	"name": {
		"familyName": "Janes"
	},
	"active":false,
	"emails": [
		{
			"value": "jack@scim.com",
			"type": "work",
			"primary": true
		}
	]
}

Nutzer löschen:
DELETE /SCIM/v2/Users/31c926dc-ae32-4df0-9b8f-f461a43586cc