SCIM 2.0 & Modern Provisioning APIs
Moving from proprietary, connector-per-application provisioning (my day-to-day with OIM) to standards-based SCIM provisioning.
Where I am: working through the specification and lab exercises. My production provisioning experience is with Oracle Identity Manager’s connector framework (direct, JDBC, web service); this path is about understanding how standards-based SCIM changes — or doesn’t change — the governance layer built on top of it.
- 1
Read the SCIM 2.0 specification
Core protocol (RFC 7644) and schema (RFC 7643) — what SCIM standardizes versus what OIM-style custom connectors handle today.
RFC 7644 — SCIM Protocol - 2
Compare SCIM against direct/JDBC connector patterns
Where a standard schema and protocol would have simplified integrations I've built by hand, and where a custom connector is still necessary.
- 3
Stand up a test SCIM service provider
Hands-on lab: implement or configure a minimal SCIM endpoint and provision test users/groups against it to see request/response behavior directly.
- 4
Map SCIM to an IGA governance model
How SCIM provisioning fits alongside certification, SoD, and role-based access — provisioning is one piece, not the whole governance picture.