What is difference between SCIM Client and SCIM Provider in real time scenario?

[Mrunal Deshmukh]

I want to access user and group from Azure AD into Servicenow, So what should I use SCIM Client or SCIM provider in Servicenow? And How can I achieve this development?

[Mark Manders]

SCIM provider synchronizes the changes made to identities in the IdP, including creating, updating or deleting records.

SCIM Client is used for creating, updating, and deleting identity resources in a system that supports SCIM compliant REST requests.

For implementation: https://docs.servicenow.com/bundle/washingtondc-platform-security/page/integrate/authentication/conc...

[Mrunal Deshmukh]

Thanks for reply @Mark Manders ! 

You mean that if I want to get data from Azure AD to servicenow that means Azure AD is a client and Servicenow is a SCIM provider?

[Randheer Singh]

Hi @Mrunal Deshmukh ,

You should use Azure AD as a SCIM client that calls ServiceNow SCIM provider APIs. Microsoft was planning to upgrade its current ServiceNow gallery application, which handles user provisioning/sync with SCIM integration. Please check the release timelines with them before writing custom integrations.

Thanks,

Randheer

[SK Chand Basha]

SCIM Client:

• A SCIM client is typically an application or service that needs to interact with an identity management system to perform operations related to user provisioning, de-provisioning, and management.
• It sends requests to a SCIM provider to create, read, update, or delete user accounts and their attributes.
• Example scenario include a cloud-based application that needs to provision user accounts based on actions taken by administrators in an identity provider system or an HR system that needs to synchronize employee data with other applications.

SCIM Provider:

• A SCIM provider is the service responsible for managing identities and exposing SCIM endpoints for clients to interact with.
• It implements the SCIM protocol and handles incoming requests from SCIM clients.
• The provider is responsible for interpreting requests from clients, executing operations such as user creation or updating attributes, and providing responses back to the clients.
• Example scenarios include identity management platforms, directory services, or user management systems that expose SCIM endpoints for integration with other applications.
• Development:-

• Azure AD Configuration:

  • First, you need to configure Azure AD to expose SCIM endpoints and enable provisioning.

• ServiceNow Configuration:

• Scheduled Synchronization:
• Testing

I hope it's Useful mark Helpful!!