ENTERPRISE

SCIM 2.0

Lucion supports organization-bound SCIM user and group lifecycle operations and a deliberately smaller subset of the SCIM specification.

GET/scim/v2/Users

List active organization users

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/Users'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/scim/v2/Users

Provision an organization user

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/scim/v2/Users'
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN'
  -H 'Content-Type: application/scim+json'
  --data '{"userName":"person@example.com","displayName":"Example Person","active":true}'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/scim/v2/Users/{id}

Read a SCIM user

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/Users/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PUT/scim/v2/Users/{id}

Replace a SCIM user

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PUT 'https://identity.lucionglobal.com/scim/v2/Users/YOUR_ID'
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN'
  -H 'Content-Type: application/scim+json'
  --data '{"userName":"person@example.com","displayName":"Example Person","active":true}'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/scim/v2/Users/{id}

Patch a SCIM user

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/scim/v2/Users/YOUR_ID'
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN'
  -H 'Content-Type: application/scim+json'
  --data '{"userName":"person@example.com","displayName":"Example Person","active":true}'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/scim/v2/Users/{id}

Deprovision a SCIM user

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/scim/v2/Users/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/scim/v2/ServiceProviderConfig

Read SCIM service capabilities

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/ServiceProviderConfig'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/scim/v2/ResourceTypes

Read SCIM resource metadata

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/ResourceTypes'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/scim/v2/Schemas/{id}

Read a SCIM resource schema

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/Schemas/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/scim/v2/Groups

List organization groups

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/Groups'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/scim/v2/Groups

Provision an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/scim/v2/Groups'
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN'
  -H 'Content-Type: application/scim+json'
  --data '{"userName":"person@example.com","displayName":"Example Person","active":true}'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/scim/v2/Groups/{id}

Read an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/scim/v2/Groups/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PUT/scim/v2/Groups/{id}

Replace an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PUT 'https://identity.lucionglobal.com/scim/v2/Groups/YOUR_ID'
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN'
  -H 'Content-Type: application/scim+json'
  --data '{"userName":"person@example.com","displayName":"Example Person","active":true}'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/scim/v2/Groups/{id}

Patch an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/scim/v2/Groups/YOUR_ID'
  -H 'Authorization: Bearer YOUR_SCIM_TOKEN'
  -H 'Content-Type: application/scim+json'
  --data '{"userName":"person@example.com","displayName":"Example Person","active":true}'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/scim/v2/Groups/{id}

Deprovision an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/scim/v2/Groups/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

SCIM bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

Supported	Not currently supported by this public boundary
Users list, create, read, replace, patch, delete	Bulk operations
Groups list, create, read, replace, patch, delete	Sort and changePassword
Individual resource ETag/meta.version, If-None-Match 304, and If-Match 412 stale-writer protection	Weak validators for mutations or cross-resource conditional requests
ServiceProviderConfig, ResourceTypes, User and Group schemas	SCIM enterprise extensions outside the documented schema
Filtering and bounded pagination for users and groups	Cross-tenant reads or mutations
Organization-bound bearer token	A universal SCIM token across tenants

SCIM group mutations are organization-scoped and replay-safe when an Idempotency-Key is supplied. Individual user and group reads return an opaque ETag and matching meta.version; If-None-Match returns 304 when unchanged, while If-Match protects PUT, PATCH, and DELETE from stale writers with a SCIM 412 response. Group membership changes accept only active users from the token's organization; deleting a group removes its group memberships but never deletes the underlying users or organization memberships.