SCIM 2.0 syncer
The SCIM syncer reads users from an external SCIM 2.0 server and imports them into Casdoor. It is read-only: Casdoor pulls from the SCIM source but does not push changes back.
This page describes using Casdoor as a SCIM client (pulling users from an external SCIM server). For information on Casdoor acting as a SCIM service provider (receiving pushes from an external system), see SCIM provisioning.
Konfiguration
Create a new syncer in Casdoor (Syncers → Add) and fill in:
| Feld | Wert |
|---|---|
| Organisation | Target Casdoor organization |
| Name | A unique name for this syncer |
| Type | SCIM |
| Server URL | Base URL of the SCIM server (e.g. https://idp.example.com/scim/v2) |
| Username | Username for Basic Auth (optional) |
| Password / API Token | Password for Basic Auth, or a Bearer token |
If both Username and Password are provided, Casdoor uses HTTP Basic Auth. If only Password is set, it is sent as a Bearer token.
Field mappings
| SCIM field | Casdoor field | Notizen |
|---|---|---|
id | Id | SCIM resource ID |
userName | Bezeichnung | Benutzername |
anzeigename | Anzeigename | Display name; falls back to name.formatted then givenName + familyName |
name.givenName | Vorname | Vorname |
name.familyName | Nachname | Nachname |
emails[primary].value | E-Mail | Primary email; falls back to first email if no primary |
phoneNumbers[primary].value | Telefon | Primary phone number |
aktiv | IsForbidden | active: false → IsForbidden: true |
Running the syncer
Click Test Connection to verify the server is reachable and credentials are accepted. Toggle Is enabled for scheduled sync, or click Sync to run immediately.
The syncer fetches users in pages of 100, iterating until all records are retrieved.