Menu
Has anyone used SCIM with Keycloak? If so, can you point me at documentation? I've google searched and it doesn't appear to be a supported configuration.
534
SCIM, on the other hand, does not use SAML. Admins can create, update and deactivate accounts from a central place using an API call.
Okta currently supports both Version 2.0 and Version 1.1 of the SCIM protocol specifications. If you haven't yet implemented SCIM, Okta recommends that you implement SCIM 2.0. To work with Okta, your SCIM application must use RESTful endpoints constructed according to either the V2.
The SCIM connection settings appear under Settings > Integration. Click Edit. Specify the SCIM connector base URL and the field name of the unique identifier for your users on your SCIM server. Under Supported provisioning actions, choose the provisioning actions supported by your SCIM server.
SCIM, or the System for Cross-domain Identity Management specification, is an open standard designed to manage user identity information. SCIM provides a defined schema for representing users and groups, and a RESTful API to run CRUD operations on those user and group resources.
Unfortunately SCIM isn't supported by Keycloak yet. There's an open issue (feature request) on their Jira: https://issues.jboss.org/browse/KEYCLOAK-2537
I just noticed that someone has started to create an open source implementation for SCIM on Keycloak. Haven't tested it yet, but sure will do that soon.
141
I provided a library that integrates with keycloak. Its currently tested with keycloak 8.0.1 and 10.0.1. I provided a simple sample project that shows how to integrate it here:
https://github.com/Captain-P-Goldfish/SCIM-SDK/tree/master/scim-for-keycloak
filtering and sorting does also already work on this example but is done by api-internal features. It is pretty fast up to 5000 users but I haven't done any distress tests. So I do not know when it will become inperformant. If you provide more users you should implement filtering on database level
30
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
