By: Carl Buxbaum user 03 Jun 2016 at 1:43 p.m. CDT

1 Response
Carl Buxbaum gravatar
Hi, I am contemplating using SCIM to create users from a local interface. That is, when we create the user in our application, use SCIM to create the gluu user. I also want to use SCIM to retrieve users to provision into another application. I have been able to integrate both of these functions into our applications. I am concerned about the level of access that the SCIM API has. Is there any way to restrict access to particular LDAP organizations, and/or to restrict to read only access? I did not see a way to create different scopes in the same vein as the Open ID connect clients and scopes. Thanks, Carl

By Valentino Pecaoco user 07 Jun 2016 at 8:35 a.m. CDT

Valentino Pecaoco gravatar
Hi Carl, Out of the box this use case is not currently supported with respect to Gluu's SCIM API or SCIM-Client. Perhaps what you can do is create a sort of custom "proxy" client that manages calls to SCIM-Client or access to the real SCIM endpoints. Thanks, Val