Group Membership Management

Create and manage groups with member add/remove operations using SCIM PATCH (RFC 7644 §3.5.2). Groups use the urn:ietf:params:scim:schemas:core:2.0:Group schema and contain a multi-valued 'members' attribute referencing User resources by their SCIM ID.

Try in Looking Glass
ProvisioningGroup Sync

Sequence Diagram

Click any step for details

IdPSCIM1Create Group2Group Created3Add Member to Group4Member Added5Remove Member from Group6Member Removed
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Create Group
IdP → SCIM Server
2
Group Created
SCIM Server → IdP
3
Add Member to Group
IdP → SCIM Server
4
Member Added
SCIM Server → IdP
5
Remove Member from Group
IdP → SCIM Server
6
Member Removed
SCIM Server → IdP

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.

Security & privacy

· Dedicated security and privacy considerations.