Supported features and limitations

SCIM API supported features and limitations

Our SCIM integration supports SCIM version 2.0 and is certified for Azure Active Directory and Okta.

*Stay tuned as our SCIM integration is certified for additional identity providers!

Supported features

The Condeco SCIM API supports the following provisioning actions:

• Create users
• Delete users
• Update user attributes
• Add a group
• Remove a group
• Update Groups attributes
• Add/remove users to/from a group

Limitations

The Condeco SCIM API has the following limitations:

1. On-premise AD does not work with the SCIM API. Only SCIM-compatible clients such as Azure AD and Okta can utilize it.
2. All users are created in Condeco as standard non-admin users.
3. The Condeco application does not support multi-valued properties.
4. Automatic user/group provisioning is only supported for Azure AD and Okta.
5. The following optional features are not currently supported:
   1. Sorting and Logical filter ‘NOT’.
   2. Bulk endpoints (…/bulk ).
6. ‘ExternalId’ is a fixed user attribute and cannot be updated.
7. Nested groups (group inside group) are not supported.
8. ‘ExternalId’ is a fixed group attribute and cannot be updated.
9. ‘Get group’ endpoint does not return the member list.
10. Child attribute filtering is not supported for multi-valued attributes such as ‘Emails’ and ‘PhoneNumbers’ for ‘Get User’ endpoint with the filtering parameter ‘excludedattributes/attributes’.
11. To update the group attribute ‘displayName’ only, the ‘replace’ operation can be used with the ‘Patch Group’ endpoint.
12. ‘Get User’ and ‘Get Group’ endpoints do not support filter by meta-attributes like ‘createddate/modifieddate’.