SCIM

Endpointhttps://api.kontorion.eu/v1

SCIM service provider configuration

GET

https://api.kontorion.eu/v1

/scim/v2/ServiceProviderConfig

SCIM 2.0 discovery endpoint (RFC 7644 §4) - returns the supported feature set (patch, bulk, filter, authentication schemes). IdP provisioners hit this first to negotiate capabilities. Authentication is Bearer-token against KONTORION_SCIM_TOKEN.

SCIM service provider configuration › Responses

200

ServiceProviderConfig resource (application/scim+json)

List SCIM users

GET

https://api.kontorion.eu/v1

/scim/v2/Users

SCIM 2.0 user listing (RFC 7644 §3.4.2) - paginated via startIndex + count, optionally filtered via the SCIM filter grammar (filter=userName eq "alice"). Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN. Returns a ListResponse envelope (application/scim+json).

List SCIM users › query Parameters

filter

string

SCIM filter expression (e.g. `userName eq \

startIndex

integer

1-based page start (default 1, max 1048576)

count

integer

Page size (default 100, max 200)

List SCIM users › Responses

ListResponse envelope

object[]

itemsPerPage

integer

schemas

string[]

startIndex

integer

totalResults

integer

GET/scim/v2/Users

curl --request GET \
  --url https://api.kontorion.eu/v1/scim/v2/Users

shell

Example Responses

{
  "Resources": [
    {
      "active": true,
      "displayName": "displayName",
      "emails": [
        {
          "primary": true,
          "type": "type",
          "value": "value"
        }
      ],
      "id": "id",
      "meta": {
        "created": "created",
        "lastModified": "lastModified",
        "location": "location",
        "resourceType": "resourceType"
      },
      "name": {
        "familyName": "familyName",
        "formatted": "formatted",
        "givenName": "givenName"
      },
      "schemas": [
        "string"
      ],
      "userName": "userName"
    }
  ],
  "itemsPerPage": 0,
  "schemas": [
    "string"
  ],
  "startIndex": 0,
  "totalResults": 0
}

json

application/json

Create a SCIM user

POST

https://api.kontorion.eu/v1

/scim/v2/Users

SCIM 2.0 user provisioning (RFC 7644 §3.3) - the IdP pushes a new user. The concrete provider joins users + organization_members in PG and forwards to Keycloak Admin API. Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN.

Create a SCIM user › Request Body

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Create a SCIM user › Responses

Created SCIM User resource

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

POST/scim/v2/Users

curl --request POST \
  --url https://api.kontorion.eu/v1/scim/v2/Users \
  --header 'Content-Type: application/json' \
  --data '
{
  "active": true,
  "displayName": "displayName",
  "emails": [
    {
      "primary": true,
      "type": "type",
      "value": "value"
    }
  ],
  "id": "id",
  "meta": {
    "created": "created",
    "lastModified": "lastModified",
    "location": "location",
    "resourceType": "resourceType"
  },
  "name": {
    "familyName": "familyName",
    "formatted": "formatted",
    "givenName": "givenName"
  },
  "schemas": [
    "string"
  ],
  "userName": "userName"
}
'

shell

Example Request Body

{
  "active": true,
  "displayName": "displayName",
  "emails": [
    {
      "primary": true,
      "type": "type",
      "value": "value"
    }
  ],
  "id": "id",
  "meta": {
    "created": "created",
    "lastModified": "lastModified",
    "location": "location",
    "resourceType": "resourceType"
  },
  "name": {
    "familyName": "familyName",
    "formatted": "formatted",
    "givenName": "givenName"
  },
  "schemas": [
    "string"
  ],
  "userName": "userName"
}

json

Example Responses

{
  "active": true,
  "displayName": "displayName",
  "emails": [
    {
      "primary": true,
      "type": "type",
      "value": "value"
    }
  ],
  "id": "id",
  "meta": {
    "created": "created",
    "lastModified": "lastModified",
    "location": "location",
    "resourceType": "resourceType"
  },
  "name": {
    "familyName": "familyName",
    "formatted": "formatted",
    "givenName": "givenName"
  },
  "schemas": [
    "string"
  ],
  "userName": "userName"
}

json

application/json

Get a SCIM user

GET

https://api.kontorion.eu/v1

/scim/v2/Users/{id}

SCIM 2.0 single-user retrieval (RFC 7644 §3.4.1). Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN.

Get a SCIM user › path Parameters

id

string · required

User UUID

Get a SCIM user › Responses

SCIM User resource

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Replace a SCIM user

PUT

https://api.kontorion.eu/v1

/scim/v2/Users/{id}

SCIM 2.0 full-resource replacement (RFC 7644 §3.5.1, PUT semantics - the body fully replaces the stored resource, attributes not present are cleared). Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN.

Replace a SCIM user › path Parameters

id

string · required

User UUID

Replace a SCIM user › Request Body

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Replace a SCIM user › Responses

Updated SCIM User resource

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

PUT/scim/v2/Users/{id}

curl --request PUT \
  --url https://api.kontorion.eu/v1/scim/v2/Users/:id \
  --header 'Content-Type: application/json' \
  --data '
{
  "active": true,
  "displayName": "displayName",
  "emails": [
    {
      "primary": true,
      "type": "type",
      "value": "value"
    }
  ],
  "id": "id",
  "meta": {
    "created": "created",
    "lastModified": "lastModified",
    "location": "location",
    "resourceType": "resourceType"
  },
  "name": {
    "familyName": "familyName",
    "formatted": "formatted",
    "givenName": "givenName"
  },
  "schemas": [
    "string"
  ],
  "userName": "userName"
}
'

shell

Example Request Body

{
  "active": true,
  "displayName": "displayName",
  "emails": [
    {
      "primary": true,
      "type": "type",
      "value": "value"
    }
  ],
  "id": "id",
  "meta": {
    "created": "created",
    "lastModified": "lastModified",
    "location": "location",
    "resourceType": "resourceType"
  },
  "name": {
    "familyName": "familyName",
    "formatted": "formatted",
    "givenName": "givenName"
  },
  "schemas": [
    "string"
  ],
  "userName": "userName"
}

json

Example Responses

{
  "active": true,
  "displayName": "displayName",
  "emails": [
    {
      "primary": true,
      "type": "type",
      "value": "value"
    }
  ],
  "id": "id",
  "meta": {
    "created": "created",
    "lastModified": "lastModified",
    "location": "location",
    "resourceType": "resourceType"
  },
  "name": {
    "familyName": "familyName",
    "formatted": "formatted",
    "givenName": "givenName"
  },
  "schemas": [
    "string"
  ],
  "userName": "userName"
}

json

application/json

Delete a SCIM user

DELETE

https://api.kontorion.eu/v1

/scim/v2/Users/{id}

SCIM 2.0 user de-provisioning (RFC 7644 §3.6). Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN.

Delete a SCIM user › path Parameters

id

string · required

User UUID

Delete a SCIM user › Responses

No Content

No data returned

Roles Search

SCIM service provider configuration

GET

https://api.kontorion.eu/v1

/scim/v2/ServiceProviderConfig

SCIM service provider configuration › Responses

200

ServiceProviderConfig resource (application/scim+json)

List SCIM users

GET

https://api.kontorion.eu/v1

/scim/v2/Users

List SCIM users › query Parameters

filter

string

SCIM filter expression (e.g. `userName eq \

startIndex

integer

1-based page start (default 1, max 1048576)

count

integer

Page size (default 100, max 200)

List SCIM users › Responses

ListResponse envelope

object[]

itemsPerPage

integer

schemas

string[]

startIndex

integer

totalResults

integer

Create a SCIM user

POST

https://api.kontorion.eu/v1

/scim/v2/Users

Create a SCIM user › Request Body

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Create a SCIM user › Responses

Created SCIM User resource

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Get a SCIM user

GET

https://api.kontorion.eu/v1

/scim/v2/Users/{id}

SCIM 2.0 single-user retrieval (RFC 7644 §3.4.1). Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN.

Get a SCIM user › path Parameters

id

string · required

User UUID

Get a SCIM user › Responses

SCIM User resource

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Replace a SCIM user

PUT

https://api.kontorion.eu/v1

/scim/v2/Users/{id}

Replace a SCIM user › path Parameters

id

string · required

User UUID

Replace a SCIM user › Request Body

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Replace a SCIM user › Responses

Updated SCIM User resource

active

boolean

displayName

string

object[]

id

string

object

schemas

string[]

userName

string

Delete a SCIM user

DELETE

https://api.kontorion.eu/v1

/scim/v2/Users/{id}

SCIM 2.0 user de-provisioning (RFC 7644 §3.6). Admin-only; authentication is Bearer-token against KONTORION_SCIM_TOKEN.

Delete a SCIM user › path Parameters

id

string · required

User UUID

Delete a SCIM user › Responses

No Content

No data returned