Sign in
Organization SCIM

Create the SCIM configuration for an organization

Changed on

Creates the SCIM 2.0 service-provider configuration for the organization. Requires manage-organizations or manage-identity-providers on the organization. Returns 404 if the realm-level SCIM flag is off, and 409 if a configuration already exists for the organization. Cleartext secrets and basic passwords submitted here are hashed with Argon2id before persistence.

post/{realm}/orgs/{orgId}/scim

Request

  • Base URL: https://app.phasetwo.io/realms
  • URL: https://app.phasetwo.io/realms/{realm}/orgs/{orgId}/scim
  • Auth: HTTP bearer

Request body

enabledboolean

Whether the organization's SCIM endpoint accepts inbound traffic. Turn this off to pause provisioning without losing the configuration.

email_as_usernameboolean

When true, the provisioned user's username mirrors their email, and subsequent SCIM update operations do not change the username.

link_idpboolean

When true, provisioned users are federated with the organization's configured identity provider so they can sign in via the org's SSO immediately after provisioning.

Response

SCIM configuration created

enabledboolean

Whether the organization's SCIM endpoint accepts inbound traffic. Turn this off to pause provisioning without losing the configuration.

email_as_usernameboolean

When true, the provisioned user's username mirrors their email, and subsequent SCIM update operations do not change the username.

link_idpboolean

When true, provisioned users are federated with the organization's configured identity provider so they can sign in via the org's SSO immediately after provisioning.

Changes