diff --git a/content/en/docs/marketplace/platform-supported-content/modules/scim/_index.md b/content/en/docs/marketplace/platform-supported-content/modules/scim/_index.md index 486da9270f2..a36fdb1f097 100644 --- a/content/en/docs/marketplace/platform-supported-content/modules/scim/_index.md +++ b/content/en/docs/marketplace/platform-supported-content/modules/scim/_index.md @@ -239,6 +239,15 @@ The table below compares the primary user-identifying attribute used by SCIM (i. | Okta | SAML | SCIM.externalID and SAML.Use Name ID contain the same value.
Note: Configure Application username to Custom with user.getInternalProperty("id"). | | EntraID | SAML | SCIM.externalID and SAML.Use Name ID contain the same value.
Note: Map Unique User Identifier as user.objectid in SSO Configuration. | +{{% alert color="info" %}} +To ensure the SCIM module functions correctly, configure your Identity Provider (IdP) to: + +* map `externalId` to an immutable and unique identifier (for example, `oid` in Microsoft Entra ID). +* map `userName` to a unique user attribute. + +Both `externalId` and `userName` are mandatory attributes and must be included in the SCIM request payload. +{{% /alert %}} + #### Advanced Attribute Mapping {#advanced-attribute-mapping} Starting from version 4.1.0, the SCIM module provides enhanced support for handling both single-value and multi-value attributes, as well as SCIM extension schemas.