scim_config

GET /ServiceProviderConfig

Describe the supported SCIM protocol subset.

Authenticated by the same org token as Users and Groups. Patch and filter are supported; bulk, sorting, password change and ETags are not. DELETE Users soft-deactivates membership. Role mappings and default roles are managed through /v1 organization administration, never user role attributes.

Operation ID: getScimServiceProviderConfig · Service: gateway-api

Authentication

• scimBearer (http (bearer)) — An org-bound SCIM token; session JWTs and project API keys are rejected.

Responses

Status	Schema	Description
200	ScimServiceProviderConfig	SCIM capabilities, not an organization or tenant inventory.
401	ScimError	Missing, malformed, wrong or revoked organization SCIM token.
429	ScimError	Organization SCIM token bucket exceeded.
default	ScimError	SCIM Error with a status string matching the HTTP status.

Errors

SCIM responses use application/scim+json and RFC 7644 Error objects. The status attribute is a string containing the HTTP status code; detail describes the failure and scimType may identify its cause. HTTP 429 responses include Retry-After.

{
  "detail": "Unsupported filter",
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:Error"
  ],
  "scimType": "invalidFilter",
  "status": "400"
}