SCIM Gateway Migration
Authentication
If either an Audience or Tenant is set, the authentication type used will be Azure AD JWT Bearer. Otherwise, it will be None.
WARNING
The Azure AD JWT Bearer authentication method is deprecated, and should not be used. None authentication is also not recommended for publicly accessible endpoints. The recommended authentication types are Secret Token or JWT Bearer.
User ID Lookup Field
The legacy User ID Lookup Field setting has no direct configuration in the new gateway, but is used to determine the correct setting for the Mapping Type for the user's manager and group's member fields. If the lookup field was [DN], then the mapping kind used will be Referenced Entity DN. If a adapter schema field is selected, then the mapping kind will be Referenced Entity Field Value using the selected schema field.
For more information on the different mapping types, see SCIM Mappings.
Mapping
The following tables describe the way in which the v5.3 and older SCIM gateway mappings are converted to new mappings. The SCIM paths used are based on the standard schema defined in RFC7643. Only used legacy mappings will be included in converted configuration.
TIP
If the SCIM client used with a gateway allows custom mappings as part of its configuration, ensure that those match up with the gateway mapping's paths. These will need to be updated in cases where the client had been configured to use a non-standard schema.
User
| v5.3 Mapping Name | Migrated Mapping SCIM Path |
|---|---|
| active | active |
| displayName | displayName |
| department | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department |
| preferredLanguage | preferredLanguage |
| title | title |
| username | userName |
| manager | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager |
| employeeNumber | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber |
| faxNumber | phoneNumbers[type eq "fax"].value |
| givenName | name.givenName |
| workEmail | emails[type eq "work"].value |
| mobilePhoneNumber | phoneNumbers[type eq "mobile"].value |
| workPostalCode | addresses[type eq "work"].postalCode |
| otherEmail | emails[type eq "other"].value |
| otherAddressFormatted | addresses[type eq "other"].formatted |
| workStreetAddress | addresses[type eq "work"].streetAddress |
| familyName | name.familyName |
| workPhoneNumber | phoneNumbers[type eq "work"].value |
| organization | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization |
| division | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division |
| workLocality | addresses[type eq "work"].locality |
| workCountry | addresses[type eq "work"].country |
| workRegion | addresses[type eq "work"].region |
| costCenter | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:costCenter |
| formattedName | name.formatted |
Group
| v5.3 Mapping Name | Migrated Mapping SCIM Path |
|---|---|
| displayName | displayName |
| members | members |
| securityEnabled | securityEnabled |
External ID
The externalId is a special value in the SCIM resource schema. The External Id Field will be set based on legacy mappings, but will not be included as a standard mapping.