From 8dede1c98c58748f164ffa772f76a7fbe8cd3bcc Mon Sep 17 00:00:00 2001 From: Saad Khan Date: Fri, 2 Oct 2026 00:11:37 -0700 Subject: [PATCH] docs(auth): Add SCIM 2.0 service discovery section Document the discovery endpoints (ServiceProviderConfig, ResourceTypes, Schemas) that getsentry/sentry#119884 completed, and link to the new section from the SAML2 SCIM docs. Refs getsentry/sentry#114950 --- docs/organization/authentication/sso/index.mdx | 6 ++++++ docs/organization/authentication/sso/saml2.mdx | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/organization/authentication/sso/index.mdx b/docs/organization/authentication/sso/index.mdx index c264f4c58b177..dc8d7f1c694cd 100644 --- a/docs/organization/authentication/sso/index.mdx +++ b/docs/organization/authentication/sso/index.mdx @@ -179,3 +179,9 @@ System for Cross-Domain Identity Management ([SCIM](http://www.simplecloud.info/ - [Okta SCIM Setup](/organization/authentication/sso/okta-sso/okta-scim/) - [Azure AD SCIM Setup](/organization/authentication/sso/azure-sso/#scim-integration) - If your Provider is not listed here, SCIM may be supported as it is a common standard. If you are having issues please contact our support team. + +### SCIM 2.0 Service Discovery + +Sentry supports the SCIM 2.0 service discovery endpoints defined in [Section 4 of RFC 7644](https://datatracker.ietf.org/doc/html/rfc7644#section-4): `ServiceProviderConfig`, `ResourceTypes`, and `Schemas`. They're available under your SCIM URL, require the same Auth Token as the rest of the SCIM API, and need no additional setup. + +Identity Governance and Administration (IGA) platforms, such as SailPoint IdentityIQ, require these endpoints to connect and use them to discover which SCIM features and attributes Sentry supports. For request and response details, see the [SCIM API documentation](/api/scim/). diff --git a/docs/organization/authentication/sso/saml2.mdx b/docs/organization/authentication/sso/saml2.mdx index 5c998ab2fd2cc..bbbce5f6cd03d 100644 --- a/docs/organization/authentication/sso/saml2.mdx +++ b/docs/organization/authentication/sso/saml2.mdx @@ -136,7 +136,7 @@ Because Sentry uses Just-In-Time (JIT) provisioning, new members are registered ## SCIM Provisioning -SCIM is available for automatic user provisioning, deprovisioning, and team assignment for SAML2 IdPs. [Configure Sentry for SCIM](/organization/authentication/sso/okta-sso/okta-scim/#sentry-configuration), and then follow your IdP's documentation for further setup. Learn more about the Sentry SCIM API endpoints in the [SCIM API documentation](/api/scim/). +SCIM is available for automatic user provisioning, deprovisioning, and team assignment for SAML2 IdPs. [Configure Sentry for SCIM](/organization/authentication/sso/okta-sso/okta-scim/#sentry-configuration), and then follow your IdP's documentation for further setup. Learn more about the Sentry SCIM API endpoints in the [SCIM API documentation](/api/scim/). If you connect an identity governance platform, such as SailPoint IdentityIQ, see [SCIM 2.0 Service Discovery](/organization/authentication/sso/#scim-20-service-discovery). ## FAQ