Jayvd (Customer) to rsaSFDCadmin (RSA): asked a question.
SCIM Collector / Connector Support
At the moment we need to integrate a group of business cloud applications
(multiple SAP Systems/Ariba/Celonis) with the SecurID G&L 7.5.2 system, all
these applications provide SCIM support for their IAM integrations.
When trying to setup the SCIM interface in SecurID G&L we were unable to
configure modern authentication (OAuth/Token/etc.) and also the field mapping
was highly lacking, the existing [SCIM
documentation](https://community.rsa.com/t5/securid-governance-
lifecycle/system-for-cross-domain-identity-management-scim-
summary/ta-p/562125) barely shows and details and we reached out to support.
Support referenced us to a [knowledge base article
000039134](https://community.rsa.com/t5/securid-governance-
lifecycle/scim-2-0-data-collector-and-afx-connector-for-rsa-identity/ta-p/878)
and a [product idea](https://community.rsa.com/t5/securid-governance-
lifecycle/scim-2-0-support-for-afx-connector-collector/idi-p/573505). The
information is basically telling that the SCIM interface is no longer
developed and that you should build the configuration using a REST based
interface.
This statement is rather surprising me:
* SCIM interfaces are significantly different than REST interfaces
* SCIM is being used more and more for Cloud systems because of its simplicity to integrate
SCIM vs REST:
1. SCIM Interface:
1. Published Schema Meta Data Information to allow easy information mapping (see example <https://www.simplecloud.info/>)
2. Has a predefined format for retrieval of information (Read/GET)
3. Has a predefined format for provisioning of information (Create/POST, Update/PATCH, Replace/PUT, Delete/DELETE)
2. REST Interface:
1. Doesn’t have a predefined data schema, requires individual development each time for each action
The amount of work required to configure a SCIM interface which can publish
its own meta data schema is in no perspective to the work of configuring a
REST interface. As time is money, this basically means that the TCO of a SCIM
integration will be a lot higher.
The statement to use a REST interface was made in 2021 and is clearly in
contrast where the rest of the market is heading towards over the last couple
of years. Is this still the same vision for the future?
(multiple SAP Systems/Ariba/Celonis) with the SecurID G&L 7.5.2 system, all
these applications provide SCIM support for their IAM integrations.
When trying to setup the SCIM interface in SecurID G&L we were unable to
configure modern authentication (OAuth/Token/etc.) and also the field mapping
was highly lacking, the existing [SCIM
documentation](https://community.rsa.com/t5/securid-governance-
lifecycle/system-for-cross-domain-identity-management-scim-
summary/ta-p/562125) barely shows and details and we reached out to support.
Support referenced us to a [knowledge base article
000039134](https://community.rsa.com/t5/securid-governance-
lifecycle/scim-2-0-data-collector-and-afx-connector-for-rsa-identity/ta-p/878)
and a [product idea](https://community.rsa.com/t5/securid-governance-
lifecycle/scim-2-0-support-for-afx-connector-collector/idi-p/573505). The
information is basically telling that the SCIM interface is no longer
developed and that you should build the configuration using a REST based
interface.
This statement is rather surprising me:
* SCIM interfaces are significantly different than REST interfaces
* SCIM is being used more and more for Cloud systems because of its simplicity to integrate
SCIM vs REST:
1. SCIM Interface:
1. Published Schema Meta Data Information to allow easy information mapping (see example <https://www.simplecloud.info/>)
2. Has a predefined format for retrieval of information (Read/GET)
3. Has a predefined format for provisioning of information (Create/POST, Update/PATCH, Replace/PUT, Delete/DELETE)
2. REST Interface:
1. Doesn’t have a predefined data schema, requires individual development each time for each action
The amount of work required to configure a SCIM interface which can publish
its own meta data schema is in no perspective to the work of configuring a
REST interface. As time is money, this basically means that the TCO of a SCIM
integration will be a lot higher.
The statement to use a REST interface was made in 2021 and is clearly in
contrast where the rest of the market is heading towards over the last couple
of years. Is this still the same vision for the future?
<https://community.rsa.com/t5/securid-governance-lifecycle/scim-2-0-support-
for-afx-connector-collector/idi-p/573505>
cc: [@ahmed_elashry](https://community.rsa.com/t5/user/viewprofilepage/user-
id/120147)