System for Cross-domain Identity Management (SCIM) is an open standard used to automate provisioning and lifecycle management for identity resources such as users and groups.
Overview
SCIM provides administrators and identity platforms with a consistent REST API for creating, retrieving, updating, and deprovisioning SCIM resources.
In Perceptive Content, the SCIM adapter exposes SCIM 2.0 endpoints that allow external systems to integrate with the platform using standard HTTP methods and JSON payloads.
SCIM Base URL and endpoints
The SCIM adapter uses the following base path:
/v1/scim/v2
Resource paths such as /Users, /Groups, /Schemas, and /ResourceTypes are appended to the base path when constructing requests..
Full URL example:
https://<integration-server-host>:<port>/integrationserver/v1/scim/v2
Discovery endpoints
Service provider discovery
GET /v1/scim/v2/ServiceProviderConfig/
Returns the SCIM service provider capabilities supported by Perceptive Content, including feature support, authentication schemes, and request limits.
Resource type discovery
GET /v1/scim/v2/ResourceTypes/
Returns the list of SCIM resource types exposed by the adapter.
GET /v1/scim/v2/ResourceTypes/User
Returns the metadata for the SCIM User resource type.
GET /v1/scim/v2/ResourceTypes/Group
Returns the metadata for the SCIM Group resource type.
Schema discovery
GET /v1/scim/v2/Schemas/
Returns the list of schemas exposed by the SCIM adapter.
GET /v1/scim/v2/Schemas/User
Returns the schema definition for the SCIM User resource, including the attributes supported for that resource.
GET /v1/scim/v2/Schemas/Group
Returns the schema definition for the SCIM Group resource.
User endpoints
GET /v1/scim/v2/Users
Returns the SCIM User resource collection and supports standard SCIM query parameters such as filtering, paging, attribute selection, and sorting..
GET /v1/scim/v2/Users/{id}
Returns a single SCIM User resource by identifier.
POST /v1/scim/v2/Users
Creates a SCIM User resource from a SCIM JSON payload and returns the created resource.
PUT /v1/scim/v2/Users/{id}
Replaces the attributes of a SCIM User resource using SCIM PUT semantics.
PATCH /v1/scim/v2/Users/{id}
Applies a partial update to a SCIM User resource.
DELETE /v1/scim/v2/Users/{id}
Deletes an existing SCIM User resource.
Group endpoints
GET /v1/scim/v2/Groups
Returns a list of groups, and supports standard SCIM query parameters such as filtering, paging, attribute selection, and sorting.
GET /v1/scim/v2/Groups/{id}
Returns a single group by ID.
POST /v1/scim/v2/Groups
Creates a group.
PUT /v1/scim/v2/Groups/{id}
Replaces a group.
PATCH /v1/scim/v2/Groups/{id}
Partially updates a group.
DELETE /v1/scim/v2/Groups/{id}
Deletes a group.
SCIM configuration
SCIM adapter settings are configured in integrationserver.ini. The core SCIM properties and their product defaults are listed below.
The following table lists SCIM-related product default settings.
| Property | Default value | Description |
|---|---|---|
| agent.token.keystore.location | empty | Path to the keystore used for token‑based agent authentication. |
| agent.token.keystore.password | empty | Password for the authentication token keystore. |
| scim.adapter.enabled | FALSE | Enables or disables the SCIM adapter endpoints. |
| scim.adapter.server.connection.pool.connections.max | 10 | Maximum backend server connections. |
| scim.adapter.server.connection.pool.connection.expiration.time.seconds | 60 | Idle connection expiration time (seconds). |
| scim.adapter.server.connection.pool.connection.wait.period.milliseconds | 1000 | Maximum wait time (ms) when the pool is exhausted. |
| scim.adapter.request.limit.bulk.maxoperations | 1000 | Maximum number of operations allowed in a bulk request. |
| scim.adapter.request.limit.bulk.maxpayloadsize | 1048576 | Maximum bulk payload size (bytes). |
| scim.adapter.request.limit.filter.maxresults | 200 | Maximum number of results returned for filter/list requests. |
| scim.adapter.request.default.department.name | empty | Default department name used when creating SCIM resources. |
Example deployed values
agent.token.keystore.location = C:/inserver/certs/psw-is-token-auth-truststore.jks agent.token.keystore.password = pcrxDcUbmphfzxXOCHWMXXSECRET scim.adapter.enabled = TRUE scim.adapter.request.limit.filter.maxresults = 200 scim.adapter.request.default.department.name = Default
Notes:
- The SCIM adapter requires configured token authentication keystore settings.
- scim.adapter.enabled must be TRUE.
- Restart the integration server after making changes.