The Gluu Server was designed to be an identity and access management platform, not a identity management workflow platform. With that said, you might be able to achieve some of your goals by using hte SCIM custom interception scripts. When a user is added via SCIM, you have the ability to add some custom business logic via the interception script mechanism. For example, for a POST to /users you could add some custom code to update an RDBMS via JDBC and Active Directory, as in your diagram. You'd have to be a pretty good java programmer to get this done.