Integrating SailPoint with SCIM 2.0 SaaS

The SCIM (System for Cross-Domain Identity Management) standard defines a schema and API to create, read, update, and delete identity and identity-related information on other systems. This standard creates a common language, by which a client system can communicate with many different servers in the same way.

Use the SCIM 2.0 SaaS source to manage identity and access in the SCIM Service provider application. The SCIM 2.0 SaaS source connects to a SCIM Service provider application securely to load data from and provision changes.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

Any SCIM 2.0 compliant target system can be managed by using the SCIM 2.0 SaaS source. The SCIM 2.0 SaaS source supports the following features:

Discover Account Schema
Aggregate Accounts
Aggregate Groups
Delta Aggregation
Aggregation Partitioning
Create Account
Account updates
Add and Remove Entitlements
Enable and Disable Accounts
Change Password
Access Certifications (certification of entitlements connected to accounts)
Unlock account

Note

Mapping of the locked status and unlock account operation is supported based on the provided extension attribute.

Prerequisites

The following prerequisites are required:

SailPoint's SCIM 2.0 SaaS source requires the following endpoints with a valid response for connector execution:
```
/ServiceProviderConfig
/ResourceTypes
/Schemas
/ResourceTypes/User
/ResourceTypes/Group
```
These endpoints should be defined as per the following RFCs:
- RFC 7643: System for Cross-domain Identity Management: Core Schema
- RFC 7644: System for Cross-domain Identity Management: Protocol
Note

Not applicable if Non-Compliant Server is enabled.
Service accounts used for the SCIM 2.0 SaaS source should have the permissions to perform the following operations:
- get all users
- modify user
- get all groups
- modify group membership
Supported Applications
- Any application that supports the SCIM 2.0 specification.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.