40 lines
1.8 KiB
Markdown
40 lines
1.8 KiB
Markdown
|
---
|
||
|
|
title: The solution, SCIM
|
||
|
|
description : SCIM, for System for Cross-domain Identity Management are specifications designed to **make managing user identities in cloud-based applications and services easier.**
|
||
|
|
color : blue-1
|
||
|
|
weight : 2
|
||
|
|
---
|
||
|
|
<img alt="Scim diagram" src="media/scim-diagram-0.png" class="float-right">
|
||
|
|
|
||
|
|
### Quick overview
|
||
|
|
The **SCIM protocol** is an application-level protocol for **provisioning** and **managing identity** data specified through SCIM schemas.
|
||
|
|
Its intent is to **reduce the cost and complexity** of user management operations.
|
||
|
|
* A **common existing user schema and deployments**
|
||
|
|
* **Extension models**
|
||
|
|
* Placing specific emphasis on **simplicity of development and integration**
|
||
|
|
* **Applying existing models** (authentication, authorization, and privacy)
|
||
|
|
* Binding documents to provide **patterns for exchanging this schema using standard protocols**
|
||
|
|
* Easily improve **GDPR compliance**
|
||
|
|
* **Consolidate the user experience** across multiple FOSS applications as one platform
|
||
|
|
|
||
|
|
{{< grid >}}
|
||
|
|
{{< card >}}
|
||
|
|
#### Model
|
||
|
|
SCIM 2.0 is built on an object model where **a Resource is the common denominator** and all SCIM objects are derived from it.
|
||
|
|
{{< /card >}}
|
||
|
|
|
||
|
|
{{< card >}}
|
||
|
|
#### Rest API
|
||
|
|
For manipulation of resources, with a set of operations, which **support everything** from **patching a specific attribute on a specific user** to doing **massive bulk updates**.
|
||
|
|
{{< /card >}}
|
||
|
|
|
||
|
|
{{< card >}}
|
||
|
|
#### Discover
|
||
|
|
To **simplify interoperability**, SCIM provides **three end points** to discover supported features and specific attribute details.
|
||
|
|
{{< /card >}}
|
||
|
|
{{< /grid >}}
|
||
|
|
|
||
|
|
<a class="btn lv2" target="_blank" href="https://simplecloud.info">See the official spec ↗</a>
|
||
|
|
|
||
|
|
#### In essence
|
||
|
|
<mark>Make it **fast**, **cheap**, and **easy** to **move users in to**, **out of**, and **around the cloud**.</mark>
|