SCIM User Management

Overview

System for Cross-Domain Identity Management (SCIM) is an open standard protocol for automating the exchange of user identity information between identity domains and IT systems. SCIM ensures that employees added to the Human Capital Management (HCM) system automatically have accounts created in Azure Active Directory (Azure AD) or Windows Server Active Directory. User attributes and profiles are synchronised between the two systems, updating and removing users based on the user status or role change.

SCIM is a standardised definition of two endpoints: a /Users’ endpoint and a /Groups endpoint. It uses common REST verbs to create, update, and delete objects. It also uses a predefined schema for common attributes like group name, username, first name, last name, and email. Applications that offer a SCIM 2.0 REST API can reduce or eliminate the pain of working with proprietary user management APIs or products. For example, any SCIM-compliant client can make an HTTP POST of a JSON object to the /Users endpoint to create a new user entry. Instead of needing a slightly different API for the same basic actions, apps that conform to the SCIM standard can instantly take advantage of pre-existing clients, tools, and code.

Key Features & Functionality

Appian does not natively support SCIM, hence the custom application that this documentation refers to. The downloaded content contains two distinct Appian applications:

  • SCIM User Management (SCIM)
    • This implements the /User and /Group service endpoints that implement the various operations that allow Users to be created / changed / deactivated / reactivated, and for User membership of Groups to be managed (Users added / removed)
  • SCIM Test Application (SCIMTA)
    • This provides a set of test harnesses to flex the functionality exposed in the above application, as an alternative to using other testing tools such Postman or SOAP UI
Anonymous
Parents
  • We are unable to establish the connection between Appian and Microsoft Azure. Under the tab Tenant URL should we are suppose to give a URL and Token to test this connect. Inorder to make this connection should we make any configurations in Appian or this configurations are supposed to be made from the Microsoft side. Currently we are getting the following error when we provide a Appian WebApi Url.

    Error code: SystemForCrossDomainIdentityManagementCredentialValidationUnavailable

    Details: We received this unexpected response from your application: Received response from Web resource.    Resource: https://syniversedev.appiancloud.com/suite/webapi/scim/Users?filter=userName+eq+"4ef2739f-c73d-4068-93c1-cd25be59a05a"    Operation: GET    Response Status Code: InternalServerError    Response Headers: Connection: keep-alive X-Trace-Id: ca4622c1a9fb05449296e43e18944c41 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN Content-Security-Policy-Report-Only: style-src 'unsafe-inline' 'self' https://web-assets.appian-cdn.com 'strict-dynamic' 'nonce-OWY1Zjg1MmYtMWQ2YS00NDMwLWE4NWUtMDUyMTcyMDA5ZTVk'; child-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web-assets.appian-cdn.com 'strict-dynamic' 'nonce-NDc5MDNiM2ItNzE3Zi00MGJjLThjYWYtNDVlMTRmMmM3OGI1'; object-src https:; frame-src https:; img-src https:; default-src 'self'; font-src 'self' https: data:; report-uri /suite/rest/a/logging/latest/csp/report; report-to report; Content-Security-Policy: report-uri /suite/rest/a/logging/latest/csp/report; report-to report; Reporting-Endpoints: report="/suite/rest/a/logging/latest/csp/report" X-XSS-Protection: 1; mode=block Requested-While-Authenticated: false Cache-Control: private Date: Wed, 12 Mar 2025 12:49:47 GMT    Response Content: [] Please check the service and try again.  

    Request-id: be7ef102-9ab0-4d0b-914c-f23587419107

    We need to know how to configure this tenant URL here : 

Comment
  • We are unable to establish the connection between Appian and Microsoft Azure. Under the tab Tenant URL should we are suppose to give a URL and Token to test this connect. Inorder to make this connection should we make any configurations in Appian or this configurations are supposed to be made from the Microsoft side. Currently we are getting the following error when we provide a Appian WebApi Url.

    Error code: SystemForCrossDomainIdentityManagementCredentialValidationUnavailable

    Details: We received this unexpected response from your application: Received response from Web resource.    Resource: https://syniversedev.appiancloud.com/suite/webapi/scim/Users?filter=userName+eq+"4ef2739f-c73d-4068-93c1-cd25be59a05a"    Operation: GET    Response Status Code: InternalServerError    Response Headers: Connection: keep-alive X-Trace-Id: ca4622c1a9fb05449296e43e18944c41 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN Content-Security-Policy-Report-Only: style-src 'unsafe-inline' 'self' https://web-assets.appian-cdn.com 'strict-dynamic' 'nonce-OWY1Zjg1MmYtMWQ2YS00NDMwLWE4NWUtMDUyMTcyMDA5ZTVk'; child-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web-assets.appian-cdn.com 'strict-dynamic' 'nonce-NDc5MDNiM2ItNzE3Zi00MGJjLThjYWYtNDVlMTRmMmM3OGI1'; object-src https:; frame-src https:; img-src https:; default-src 'self'; font-src 'self' https: data:; report-uri /suite/rest/a/logging/latest/csp/report; report-to report; Content-Security-Policy: report-uri /suite/rest/a/logging/latest/csp/report; report-to report; Reporting-Endpoints: report="/suite/rest/a/logging/latest/csp/report" X-XSS-Protection: 1; mode=block Requested-While-Authenticated: false Cache-Control: private Date: Wed, 12 Mar 2025 12:49:47 GMT    Response Content: [] Please check the service and try again.  

    Request-id: be7ef102-9ab0-4d0b-914c-f23587419107

    We need to know how to configure this tenant URL here : 

Children
No Data