Listen
0:00 / ~0:34
Loading workspacePreparing your latest view
Enterprise identity surfaces. SCIM 2.0 provisions users and groups from an IdP (Okta, Entra, JumpCloud, etc.). SAML and OIDC handle sign-in, with optional MFA enforcement and IP allowlisting.
/api/scim/v2/ServiceProviderConfig/api/scim/v2/Schemas/api/scim/v2/ResourceTypes/api/scim/v2/Users/api/scim/v2/Users/api/scim/v2/Users/{id}/api/scim/v2/Users/{id}/api/scim/v2/Users/{id}/api/scim/v2/Groups/api/scim/v2/GroupsAuthenticate with a long-lived bearer token issued from /api/admin/scim/providers/{providerId}/tokens. The connector logs every operation to /api/admin/scim/logs.
/api/admin/scim/providers/api/admin/scim/providers/api/admin/scim/providers/{providerId}/mappings/api/admin/scim/providers/{providerId}/resync/api/auth/sso/saml/login/api/auth/sso/saml/acs/api/auth/sso/saml/metadata/api/auth/sso/oidc/login/api/auth/sso/oidc/callback/api/admin/security/sso/api/admin/security/sso/api/auth/mfa/enroll/api/auth/mfa/verify/api/auth/mfa/recovery-codes/api/auth/google/start/api/auth/github/start/api/auth/oneprofile/start/api/auth/accounts/list/api/auth/accounts/switch/api/auth/accounts/remove/api/admin/security/policies/api/admin/security/ip-allowlist/api/admin/security/domains/api/admin/security/sessions/api/admin/security/sessions/{sessionId}