Thanks to visit codestin.com
Credit goes to github.com

Skip to content

docs: document SCIM 2.0 handler opt-in and legacy flag #27469

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Emyrk merged 5 commits into from
Jul 27, 2026
Merged

docs: document SCIM 2.0 handler opt-in and legacy flag #27469

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
0f093c8
docs: document SCIM 2.0 handler opt-in and legacy flag
Emyrk Jul 23, 2026
0470523
docs: focus SCIM section on the new SCIM 2.0 flow
Emyrk Jul 23, 2026
6a5254e
Update docs/admin/users/oidc-auth/index.md
Emyrk Jul 23, 2026
ef32caa
Update docs/admin/users/oidc-auth/index.md
Emyrk Jul 23, 2026
aa0292b
Update docs/admin/users/oidc-auth/index.md
Emyrk Jul 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions docs/admin/users/oidc-auth/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -161,6 +161,31 @@ it the Coder server.
CODER_SCIM_AUTH_HEADER="your-api-key"
```

### SCIM 2.0 handler

Coder includes an opt-in SCIM 2.0 handler that follows [RFC 7644](https://datatracker.ietf.org/doc/html/rfc7644) and has been verified against an external SCIM 2.0 compliance suite.
It supports the following:

- User provisioning and deprovisioning
- User listing

To opt in, set:

```dotenv
CODER_SCIM_USE_LEGACY=false
```

This is also available as the `--scim-use-legacy` server flag and the `scimUseLegacy` YAML option.
Changing it requires a restart of the Coder server.

Behavior notes:

- Coder never hard-deletes users. `DELETE /scim/v2/Users/{id}` and deactivation (`active: false`) both [suspend](../index.md#suspend-a-user) the user.
- Re-activating or re-creating a previously suspended user places them in the dormant state, and they become active again on their next login.
- Usernames are immutable. Attempts to change `userName` via `PUT` or `PATCH` return a `mutability` error.

The SCIM 2.0 handler will eventually become the default behavior.

## TLS

If your OpenID Connect provider requires client TLS certificates for
Expand Down
Loading