Protocol

An application-level REST protocol for provisioning and managing identity data on the web.

For manipulation of resources, SCIM provides a REST API with a rich but simple set of operations, which support everything from patching a specific attribute on a specific user to doing massive bulk updates.

Conventions

Versioned base URL

Endpoint paths contain a version number — /v2/Users — so that different versions of the SCIM API can co-exist. The versions a given server supports can be discovered at runtime through the /ServiceProviderConfig endpoint.

Media type

SCIM defines application/scim+json. Servers commonly also accept application/json.

Concurrency control

Responses carry an ETag matching the resource's meta.version. Passing it back in If-Match on a subsequent write prevents concurrent modification.