SCIM and REST API Reference Sheet

For help with configuring your REST API operations, refer to these sections.

• SCIM Endpoints and CRUD Operations
• Operation Rules
• Supported SCIM Extensions
• REST API Mappings to SCIM Attributes

SCIM Endpoints and CRUD Operations

This table lists the SCIM endpoints and their supported operations.

Operation Rules

When writing SCIM operations, keep these rules in mind.

• In a clause, AND doesn’t have precedence over OR. If a clause contains both AND and OR, explicitly add brackets to the clauses.
• In a clause, attribute names and operators are case-sensitive.
• Filter these fields on their own.
  • Users: entitlements, groups
  • Groups: members
  • Entitlements: members

Supported SCIM Extensions

Salesforce supports these Salesforce User extensions under the URN urn:salesforce:schemas:extension:2.0.

• alias
• callCenterId
• extension
  

  Note In the context of this URN, the extension field describes the user’s phone extension, not a SCIM schema extension.

Salesforce also supports these Enterprise User extensions, which show up under the URN urn:scim:schemas:extension:enterprise:2.0.

• organization
• employeeNumber
• department
• manager (managerId and displayName)
• delegatedApprover (delegatedApproverId and displayName)
• division

Salesforce also supports custom fields, which show up under the URN urn:salesforce:schemas:extension:18CHARORGID.

These supported extensions for Experience Cloud and Salesforce Customer Identity users show up under the URN urn:salesforce:schemas:extension:external:2.0. Customer Identity users have the Entitlements profileId of type external identity. Likewise, Experience Cloud users have the Entitlements profileId of type community.

• accountId
• contactId
• community

If accountId or contactId values aren't provided, Salesforce creates contact and account records for the user. The new account name is in the format usernameJITUserAccount. For example: user@corpname.orgJITUserAccount.

These extensions show up under the URN urn:salesforce:schemas:extension:communities.

• networkID
• networkName

REST API Mappings to SCIM Attributes

This table shows the supported mappings of REST API object fields to SCIM schema attributes. Use this sheet as a quick reference. For a more detailed view of the supported attributes for each schema, including characteristics, send a GET request to the https://MyDomainName.my.salesforce.com/services/scim/v2/Schemas endpoint. See Understand the SCIM Implementation.