SCIM 2.0 syncer

The SCIM syncer reads users from an external SCIM 2.0 server and imports them into Casdoor. It is read-only: Casdoor pulls from the SCIM source but does not push changes back.

SCIM server vs. SCIM client

This page describes using Casdoor as a SCIM client (pulling users from an external SCIM server). For information on Casdoor acting as a SCIM service provider (receiving pushes from an external system), see SCIM provisioning.

Конфігурація

Create a new syncer in Casdoor (Syncers → Add) and fill in:

Поле	Значення
Організація	Target Casdoor organization
Name	A unique name for this syncer
Type	SCIM
Server URL	Base URL of the SCIM server (e.g. https://idp.example.com/scim/v2)
Username	Username for Basic Auth (optional)
Password / API Token	Password for Basic Auth, or a Bearer token

If both Username and Password are provided, Casdoor uses HTTP Basic Auth. If only Password is set, it is sent as a Bearer token.

Field mappings

SCIM field	Casdoor field	Примітки
id	Id	SCIM resource ID
userName	Ім'я	Ім'я користувача
displayName	DisplayName	Display name; falls back to name.formatted then givenName + familyName
name.givenName	FirstName	Ім'я
name.familyName	LastName	Прізвище
emails[primary].value	Електронна пошта	Primary email; falls back to first email if no primary
phoneNumbers[primary].value	Телефон	Primary phone number
активний	IsForbidden	active: false → IsForbidden: true

Running the syncer

Click Test Connection to verify the server is reachable and credentials are accepted. Toggle Is enabled for scheduled sync, or click Sync to run immediately.

The syncer fetches users in pages of 100, iterating until all records are retrieved.