Re: [Unity-idm-discuss] configure scim api

[Krzysztof B. <kb...@un...>]

Good morning Sander,

W dniu 02.06.2022 o 10:57, Sander Apweiler pisze:
> Good morning Krzysztof,
> thanks again for the information. It is working for password
> authentication. Now we want to enable it for OAuth token as well. Can
> we use normal tokens from unity, if they request sys:scim:read_profile
> scope? Or do we need to configure a full authenticator beside of our
> default OAauth authenticator?

Great to hear that.

Sure, you can use your "normal" tokens from Unity, after enabling SCIM 
scopes on the IdP OAuth endpoint which issue those tokens (and of course 
requesting them by your client).

I'm sure what do you mean by "full" vs "default" OAuth authenticator. To 
enable access with OAuth tokens you need to add oauth-rp authenticator 
to your scim endpoint, and this authenticator should validate tokens 
issued by Unity (or any other provider which you choose). If you have 
one like that already - sure, you can reuse it, just enable it on the 
SCIM endpoint.

Best,
Krzysztof