SCIM
Base path: /scim/v2/{orgSlug} (SCIM bearer token). Standard SCIM 2.0 for IdP provisioning (Okta/Entra).
Discovery
Section titled “Discovery”GET /ServiceProviderConfig, /Schemas, /Schemas/{id}, /ResourceTypes (ScimEndpoints.cs:39–:81).
| Method · Route | Source |
|---|---|
GET /Users · GET /Users/{id} | :112, :155 |
POST /Users | :169 |
PUT /Users/{id} · PATCH /Users/{id} | :259, :299 |
DELETE /Users/{id} | :498 |
Groups (= Roles)
Section titled “Groups (= Roles)”| Method · Route | Behaviour | Source |
|---|---|---|
GET /Groups · GET /Groups/{id} | Lists Axowl Roles; members = active ConnectedIdRoles | :375, :410 |
POST /Groups | Creates a Role (CreateRoleCommand); members assigned via AssignRoleToMemberCommand | :431 |
PUT /Groups/{id} · PATCH /Groups/{id} | Rename role + reconcile membership (assign/revoke ConnectedIdRole) | :521, :616 |
DELETE /Groups/{id} | :584 |
This is why the RBAC unification (Role = single source of truth) aligns with SCIM — see Roles & permissions.