Hi, There are two Constructors in ScimClient.java. One using access token and another using credentials. I would like to use the one with accesstoken as it uses Oauth 2.0. The problem is using a client created using access token constructor always results in 401 Unauthorized status, though valid accesstoken and expiresin time is used. This needs to be corrected. My code given below to create a person that does not work and always results in authorization error (401 unauthorized) /** gluu domain for SCIM */ String SCIM_DOMAIN = "https://six-24.rdg.ac.uk/identity/seam/resource/restv1"; /** OpenID Connect token endpoint URL */ String OAUTH_TOKEN_ENDPOINT = "https://six-24.rdg.ac.uk/oxauth/seam/resource/restv1/oxauth/token"; long expires_in = extractExpiryTime(access_token) + System.currentTimeMillis(); //adding current ms to overcome the check in isValidToken() method in initOAuthAuthentication() ScimClient client = ScimClient.oAuthInstance(access_token, expires_in, SCIM_DOMAIN, OAUTH_TOKEN_ENDPOINT); ScimResponse res = client.createPersonString(prop_json, MediaType.APPLICATION_JSON); ---------------------- Analysing the code, I think the problem is in OAuthScimClientImpl.java under SCIM-Client implementation. In the method initOAuthAuthentication(), isValidToken(now) is called and if it is invalid then getOAuthAccessToken() is called to get the access token. getOAuthAccessToken() uses the method execResourceOwnerPasswordCredentialsGrant(this.userName, this.passWord,this.scope, this.clientID, this.clientSecret) irrespective of whether the constructor is called using access token or not. So in the case of scim client created using the constructor with access token, the object might not have username and password