diff --git a/docs/organization/authentication/sso/index.mdx b/docs/organization/authentication/sso/index.mdx index c264f4c58b1773..dc8d7f1c694cdf 100644 --- a/docs/organization/authentication/sso/index.mdx +++ b/docs/organization/authentication/sso/index.mdx @@ -179,3 +179,9 @@ System for Cross-Domain Identity Management ([SCIM](http://www.simplecloud.info/ - [Okta SCIM Setup](/organization/authentication/sso/okta-sso/okta-scim/) - [Azure AD SCIM Setup](/organization/authentication/sso/azure-sso/#scim-integration) - If your Provider is not listed here, SCIM may be supported as it is a common standard. If you are having issues please contact our support team. + +### SCIM 2.0 Service Discovery + +Sentry supports the SCIM 2.0 service discovery endpoints defined in [Section 4 of RFC 7644](https://datatracker.ietf.org/doc/html/rfc7644#section-4): `ServiceProviderConfig`, `ResourceTypes`, and `Schemas`. They're available under your SCIM URL, require the same Auth Token as the rest of the SCIM API, and need no additional setup. + +Identity Governance and Administration (IGA) platforms, such as SailPoint IdentityIQ, require these endpoints to connect and use them to discover which SCIM features and attributes Sentry supports. For request and response details, see the [SCIM API documentation](/api/scim/). diff --git a/docs/organization/authentication/sso/saml2.mdx b/docs/organization/authentication/sso/saml2.mdx index 5c998ab2fd2ccc..bbbce5f6cd03db 100644 --- a/docs/organization/authentication/sso/saml2.mdx +++ b/docs/organization/authentication/sso/saml2.mdx @@ -136,7 +136,7 @@ Because Sentry uses Just-In-Time (JIT) provisioning, new members are registered ## SCIM Provisioning -SCIM is available for automatic user provisioning, deprovisioning, and team assignment for SAML2 IdPs. [Configure Sentry for SCIM](/organization/authentication/sso/okta-sso/okta-scim/#sentry-configuration), and then follow your IdP's documentation for further setup. Learn more about the Sentry SCIM API endpoints in the [SCIM API documentation](/api/scim/). +SCIM is available for automatic user provisioning, deprovisioning, and team assignment for SAML2 IdPs. [Configure Sentry for SCIM](/organization/authentication/sso/okta-sso/okta-scim/#sentry-configuration), and then follow your IdP's documentation for further setup. Learn more about the Sentry SCIM API endpoints in the [SCIM API documentation](/api/scim/). If you connect an identity governance platform, such as SailPoint IdentityIQ, see [SCIM 2.0 Service Discovery](/organization/authentication/sso/#scim-20-service-discovery). ## FAQ