This TYPO3 extension provides an implementation of the System for Cross-domain Identity Management (SCIM) standard. SCIM is designed to simplify user management in cloud-based applications and services by providing a consistent way to manage user identities across various platforms.

• User Provisioning: Automate user account creation, updates, and deletion.
• Group Management: Manage user groups and memberships.
• Schema Compliance: Fully compliant with SCIM 2.0 specifications.
• Extensible: Easily extend and customize to fit specific needs.
• Secure: Implements robust security measures to protect user data.

TYPO3 v12 or higher PHP 8.0 or higher

Add the extension to your TYPO3 project:

composer require ameos/scim

Download the extension.

Activate the extension in the TYPO3 Extension Manager.

Create a scim access record on the root page and copy the secret. This secret can be used as Bearer in your provider configuration.

Navigate to the TYPO3 Backend and go to the Template module.

Select your root page and click Edit the whole template record.

Add the static template SCIM Configuration.

Edit the plugin.tx_scim.pid constant with the ID of the storage folder containing frontend users.

You can activate or deactivate SCIM for backend or frontend and configure the api path in the extension settings.

The extension comes with a preconfigured mapping

You can modify this by indicating a path to a Yaml file in your sitepackage ext_localconf.php files with :

Configuration::registerConfiguration('EXT:sitepackage/Configuration/Scim/Configuration.yaml');

See default mapping in Configuration/Mapping/Configuration.yaml

User Endpoints:

GET /Users: Retrieve all users.
GET /Users/{id}: Retrieve a specific user by ID.
POST /Users: Create a new user.
PUT /Users/{id}: Replace an existing user.
PATCH /Users/{id}: Update an existing user.
DELETE /Users/{id}: Delete a user.

Group Endpoints:

GET /Groups: Retrieve all groups.
GET /Groups/{id}: Retrieve a specific group by ID.
POST /Groups: Create a new group.
PUT /Groups/{id}: Replace an existing group.
PATCH /Groups/{id}: Update an existing group.
DELETE /Groups/{id}: Delete a group.

Other Endpoints:

POST /Bulk: Bulk operations

Create a User

curl -X POST https://example.com/scim/v2/Users \
-H "Authorization: Bearer your_api_key_here" \
-H "Content-Type: application/json" \
-d '{
  "userName": "jdoe",
  "name": {
    "givenName": "John",
    "familyName": "Doe"
  },
  "emails": [
    {
      "value": "[email protected]",
      "primary": true
    }
  ]
}'

Retrieve a User

curl -X GET https://example.com/scim/v2/Users/{id} \
-H "Authorization: Bearer your_api_key_here"

The logging is connected to the scim channel

See the TYPO3 configuration for configuration: https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/ApiOverview/Logging/Index.html

To extend the functionality of this extension, you can:

• Use event.
• Extend the mapping configuration.
• Xclass the extension classes.

For detailed information, refer to the TYPO3 Extension Development Documentation.

For support, please open an issue on the GitHub repository or contact us at [email protected].

We welcome contributions to this project. Please follow these steps to contribute:

• Fork the repository on GitHub.
• Create a feature branch (git checkout -b feature * your-feature).
• Commit your changes (git commit -am 'Add your feature').
• Push to the branch (git push origin feature/your-feature).
• Create a new Pull Request.

This project is licensed under the MIT License. See the LICENSE file for more details.

Thank you for using our SCIM extension for TYPO3. We hope it simplifies your user management and improves your productivity.