SCIM API supported features and limitations

Our SCIM integration supports SCIM version 2.0 and is certified for Azure Active Directory and Okta.

Supported features

The Condeco SCIM API supports the following provisioning actions:

  • Create users
  • Delete users
  • Update user attributes
  • Add a group
  • Remove a group
  • Update Groups attributes
  • Add/remove users to/from a group


The Condeco SCIM API has the following limitations:

  1. On-premise AD does not work with the SCIM API. Only SCIM-compatible clients such as Azure AD and Okta can utilize it.
  2. All users are created in Condeco as standard non-admin users.
  3. The Condeco application does not support multi-valued properties.
  4. Automatic user/group provisioning is only supported for Azure AD and Okta.
  5. The following optional features are not currently supported:
    1. Sorting and Logical filter ‘NOT’.
    2. Bulk endpoints (…/bulk ).
  6. ‘ExternalId’ is a fixed user attribute and cannot be updated.
  7. Nested groups (group inside group) are not supported.
  8. ‘ExternalId’ is a fixed group attribute and cannot be updated.
  9. ‘Get group’ endpoint does not return the member list.
  10. Child attribute filtering is not supported for multi-valued attributes such as ‘Emails’ and ‘PhoneNumbers’ for ‘Get User’ endpoint with the filtering parameter ‘excludedattributes/attributes’.
  11. To update the group attribute ‘displayName’ only, the ‘replace’ operation can be used with the ‘Patch Group’ endpoint.
  12. ‘Get User’ and ‘Get Group’ endpoints do not support filter by meta-attributes like ‘createddate/modifieddate’.


Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Please do not use this for support questions.
Condeco Support

Post Comment