---
title: "PATCH /providers/scim/{id}/"
method: PATCH
path: "/providers/scim/{id}/"
tags: ["providers"]
---

# PATCH /providers/scim/{id}/

`PATCH /providers/scim/{id}/`

SCIMProvider Viewset

## Path parameters

- `id` integer, required

## Request body

- PatchedSCIMProviderRequest — SCIMProvider Serializer
  - `name` string
  - `property_mappings` string[]
  - `property_mappings_group` string[] — Property mappings used for group creation/updating.
  - `url` string — Base URL to SCIM requests, usually ends in /v2
  - `verify_certificates` boolean
  - `token` string — Authentication token
  - `auth_mode` 'token' | 'oauth' | 'oauth_interactive'
  - `auth_oauth` string, uuid, nullable — OAuth Source used for authentication
  - `auth_oauth_params` object — Additional OAuth parameters, such as grant_type
  - `compatibility_mode` 'default' | 'aws' | 'slack' | 'sfdc' | 'gitlab' | 'webex' | 'vcenter'
  - `service_provider_config_cache_timeout` string — Cache duration for ServiceProviderConfig responses. Set minutes=0 to disable.
  - `exclude_users_service_account` boolean
  - `sync_page_size` integer — Controls the number of objects synced in a single task
  - `sync_page_timeout` string — Timeout for synchronization of a single page
  - `discovery_enabled` boolean — When enabled, authentik will attempt to discover existing resources in the remote system.
  - `group_filters` string[] — Group filters used to define sync-scope for groups.
  - `dry_run` boolean — When enabled, provider will not modify or create objects in the remote system.

## Response `200`

- SCIMProvider — SCIMProvider Serializer
  - `pk` integer, required
  - `name` string, required
  - `property_mappings` string[]
  - `property_mappings_group` string[] — Property mappings used for group creation/updating.
  - `component` string, required — Get object component so that we know how to edit the object
  - `assigned_backchannel_application_slug` string, nullable, required — Internal application name, used in URLs.
  - `assigned_backchannel_application_name` string, nullable, required — Application's display Name.
  - `verbose_name` string, required — Return object's verbose_name
  - `verbose_name_plural` string, required — Return object's plural verbose_name
  - `meta_model_name` string, required — Return internal model name
  - `url` string, required — Base URL to SCIM requests, usually ends in /v2
  - `verify_certificates` boolean
  - `token` string — Authentication token
  - `auth_mode` 'token' | 'oauth' | 'oauth_interactive'
  - `auth_oauth` string, uuid, nullable — OAuth Source used for authentication
  - `auth_oauth_params` object — Additional OAuth parameters, such as grant_type
  - `auth_oauth_token_last_updated` string, date-time, nullable, required
  - `auth_oauth_token_expires` string, date-time, nullable, required
  - `auth_oauth_url_callback` string, nullable, required
  - `auth_oauth_url_start` string, nullable, required
  - `compatibility_mode` 'default' | 'aws' | 'slack' | 'sfdc' | 'gitlab' | 'webex' | 'vcenter'
  - `service_provider_config_cache_timeout` string — Cache duration for ServiceProviderConfig responses. Set minutes=0 to disable.
  - `exclude_users_service_account` boolean
  - `sync_page_size` integer — Controls the number of objects synced in a single task
  - `sync_page_timeout` string — Timeout for synchronization of a single page
  - `discovery_enabled` boolean — When enabled, authentik will attempt to discover existing resources in the remote system.
  - `group_filters` string[] — Group filters used to define sync-scope for groups.
  - `dry_run` boolean — When enabled, provider will not modify or create objects in the remote system.

## Other responses

- `400`
- `403`

---

[API](https://skmtc.dev/goauthentik/apis/authentik.md) · [All operations](https://skmtc.dev/goauthentik/apis/authentik/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/goauthentik/authentik/revisions/4e42e86021d7/schema)