Noob Question: Why SCIM while keycloak already provide rest api to manage users and groups

Captain-P-Goldfish / scim-for-keycloak

a third party module that extends keycloak by SCIM functionality

BSD 3-Clause "New" or "Revised" License

182 stars 46 forks source link

Noob Question: Why SCIM while keycloak already provide rest api to manage users and groups #81

Closed WestFarmer closed 5 months ago

WestFarmer commented 1 year ago

The only advantage I can think of is:

SCIM is a standard.

Can you guys enlighten me a bit more.

Captain-P-Goldfish commented 1 year ago

Hi,

the reason as you say because SCIM is a standard. Other providers like AWS, Microsoft Azure AD, Atlassian etc. are implementing SCIM exactly for the purpose of user and group provisioning. So as long as you do not have the need to link such services with your keycloak there is no need for you to use SCIM. But as soon as you want user and group provisioning in cloud environments or similiar this is the solution to go.