ENTERPRISE

SCIM provisioning

Configure an organization-bound bearer token and implement safe lifecycle retries.

Provisioning behavior

Create is idempotency-aware when Idempotency-Key is supplied.
Duplicate externalId or already-provisioned users return a SCIM uniqueness conflict.
PATCH supports active and displayName operations; userName is immutable.
Delete deprovisions the organization mapping and emits a safe identity.user.updated event.

Create a SCIM user

curl -X POST https://identity.lucionglobal.com/scim/v2/Users \
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN' \
  -H 'Content-Type: application/scim+json' \
  -H 'Idempotency-Key: directory-user-123-create' \
  --data '{"schemas":["urn:ietf:params:scim:schemas:core:2.0:User"],"userName":"person@example.com","displayName":"Example Person","active":true,"externalId":"directory-user-123"}'

Illustrative SCIM resource

{
  "id": "scim_USER_ID",
  "userName": "person@example.com",
  "displayName": "Example Person",
  "active": true,
  "externalId": "directory-user-123"
}

Use the returned id for later operations and retain its ETag response header. Send If-Match with the latest ETag and a new Idempotency-Key on each keyed mutation; after a timeout, retry the same request with the same key.