Group Membership Management

Create and manage groups with member add/remove operations using SCIM PATCH (RFC 7644 §3.5.2). Groups use the urn:ietf:params:scim:schemas:core:2.0:Group schema and contain a multi-valued 'members' attribute referencing User resources by their SCIM ID.

Try in Looking Glass
ProvisioningGroup Sync

Sequence Diagram

Click any step for details

IdPSCIM1Create Group2Group Created3Add Member to Group4Member Added5Remove Member from Group6Member Removed
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Create Group
IdPSCIM Server
2
Group Created
SCIM ServerIdP
3
Add Member to Group
IdPSCIM Server
4
Member Added
SCIM ServerIdP
5
Remove Member from Group
IdPSCIM Server
6
Member Removed
SCIM ServerIdP

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.

Security & privacy

· Dedicated security and privacy considerations.