Skip to main content
Eptura Knowledge Center

Eptura SCIM API

  1. Last updated
  2. Save as PDF

Early access to the Eptura SCIM API is by invitation only.

Overview

System for Cross-domain Identity Management (SCIM) is an open standard for a set of API endpoints that enable automation of user provisioning. Eptura’s SCIM-compliant API enables communication with SCIM-compatible systems providing user identity information, such as Microsoft Entra ID.

The Eptura SCIM API uses the SCIM 2.0 protocol, which provides a defined schema for representing users and groups, and a RESTful API to run CRUD operations on those users and groups.

The Eptura SCIM integration is certified for Microsoft Entra ID. 

Supported

The following actions are supported:

  • Create users
  • Delete users
  • Update user attributes
  • Add a group
  • Remove a group
  • Update a group's attributes
  • Add/remove users to/from a group

Limitations

The Eptura SCIM API has the following limitations:

  1. On-premise AD does not work with the SCIM API. Only SCIM-compatible clients such as Microsoft Entra ID can utilize it.
  2. All users are created in Eptura as 'People'.
  3. Automatic user/group provisioning is only supported for Microsoft Entra ID.
  4. The following optional features are not currently supported:
    1. Sorting
    2. Logical filter ‘NOT’.
    3. Bulk endpoints (…/bulk ).
  5. ‘ExternalId’ is a fixed user attribute and cannot be updated.
  6. Nested groups (group inside group) are not supported.
  7. Child attribute filtering is not supported for multi-valued attributes such as ‘Emails’ and ‘PhoneNumbers’ for ‘Get User’ endpoint with the filtering parameter ‘excludedattributes/attributes’.
  8. To update the group attribute ‘displayName’ only, the ‘Replace’ operation can be used with the ‘Patch Group’ endpoint.
  9. ‘Get Group’ endpoints do not support filter by meta-attributes like ‘createddate/modifieddate’

​