Regenerate integrations docs (#20453)
Co-authored-by: ilyam8 <22274335+ilyam8@users.noreply.github.com>
Netdata bot committed
Jun 9, 2025 at 20:47 UTC
48a3d6402e4cf7cc8980ea156224d7348c5c5254
1 file changed
+17
-7
integrations/cloud-authentication/integrations/scim.md
+17
-7
@@ -116,19 +116,29 @@ This mapping ensures that the identity of users remains consistent and secure ac
116
The externalID in SCIM must correspond to the subfield in OIDC. Any deviation from this mapping may result
117
in incorrect user identification and authentication failures.
118
119
-## FAQ
119
+## Supported SCIM User properties
120
121
-### Why aren’t users automatically added to Netdata spaces when they’re created through SCIM?
121
+Our SCIM server supports the following User attributes:
122
+
123
+- userName (required)
124
+- externalId (required)
125
+- name.formatted
126
+- name.familyName
127
+- name.givenName
128
+- active
129
+- emails (we only store the primary email)
130
123
-Currently, our SCIM server supports only the User resource. We plan to add support for the Group resource in the future.
131
+**Important Considerations**
132
+- Configure supported attributes only: Your SCIM client must be configured to send only the attributes listed above. Requests containing unsupported attributes will fail with a `400 Bad Request` error.
133
+- Okta users: No additional setup needed. The Netdata integration includes the correct attribute configuration automatically.
134
125
-In a Netdata space, users can belong to multiple rooms and have different roles (e.g., admin, manager). Additionally, the same organization may have multiple spaces.
135
+## FAQ
136
127
-As we don't yet support groups, when a user is created through SCIM, we don’t have a way to determine which spaces, rooms, and roles the user should be assigned to.
137
+### Why aren’t users automatically added to Netdata spaces when they’re created through SCIM?
138
129
-Once we implement support for the Group resource, admins will be able to map SCIM groups to Netdata memberships, so this assignment will be done automatically.
139
+Users created through SCIM are not automatically assigned to spaces. You need to configure Membership Rules to control space assignments.
140
131
-Until then, SCIM can only be used to grant or block access to Netdata for users in your organization. After a user is created, it is up to the Netdata administrator to manually invite them to spaces, rooms and assign roles.
141
+See Setting Up Membership Rules section above for setup instructions.
142
143
### Reference
144
[SCIM Specification](https://scim.org)