Supported Features

Using this connector, you can manage any SCIM 2.0 compliant target system. The SCIM 2.0 connector supports the following features:

Account Management

  • Aggregation, Discover Schema, and Delta Aggregation

  • Create, Update, and Delete

  • Enable and Disable

  • Change Password

  • Add and Remove Entitlements

Note
Add and Remove Entitlement works if entitlements, groups, and roles are a part of the SCIM 2.0 core schema. For more information on SCIM 2.0 core schema, refer to System for Cross-domain Identity Management: Core Schema.

Account - Group Management

  • Account-Group management aggregation

  • Discover schema

  • Delta Aggregation

  • Create, update, and delete account-groups

Note
Delta Aggregation is only applicable for SCIM 2.0 systems that support the lastModified attribute and filter for it.

API Throttling

The SCIM 2.0 connector supports API throttling. The following headers are supported for throttling, per the SCIM standards:

  • x-rate-limit-remaining

  • x-rate-limit-limit

  • x-rate-limit-reset

  • x-rate-limit-retry-after-seconds

To update the maximum API call threshold percentage, configure the following attribute to check the x-rate-limit-reset header after the threshold. The default value is 100.

<entry key="maxApiCallsThresholdPercentage" value="100"/>

For Relax and Non Relax Configuration

If any target system does not send the response headers in SCIM 2.0 specification, the following parameters can be used to update the entry.

Copy 
<entry key="rateLimitHeaders">
    <value>
        <Map>
            <entry key="limitHeader" value="rate-limit-limit"/>
            <entry key="remainingHeader" value="rate-limit-remaining"/>
            <entry key="limitResetHeader" value="rate-limit-reset"/>
            <entry key="retryAfterHeader" value="rate-limit-retry-after-seconds"/>
        </Map>
    </value>
</entry>