## 4.2.13.2.14.1  SCIM Interface for IAM
SCIM stands for System for Cross-domain Identity Management. It is an open standard that allows for the automation of user provisioning and management in cloud-based applications and services.
You can use this interface provided by the communication scenario SAP\_COM\_0465 to maintain and retrieve business users in your Cloud system and assign business roles and business user groups to them.
For more information about SCIM in general, see the Related Information section.
##  Note
The write operations are protected with a X-CSRF-Token.
## SCIM Extensions
In addition, your Cloud system provides the following extensions to extend the endpoints of users and groups:
Extension name: urn:ietf:params:scim:schemas:extension:sap:2.0:User
The following singular attributes are defined:
- validFrom : Valid From date of a business user
- validTo : Valid T o date of a business user
- loginTime : Last login time of a business user
- userUuid : Defines the global user ID
- userUuidHistory : All global user IDs that were assigned to the business user
- value : Global user ID assigned to a business user
- active : Global user ID currently actively in use
## Example
##  Sample Code
```
"urn:ietf:params:scim:schemas:extension:sap:2.0:User" : { "validFrom" : "2023-05-01T00:00:00Z", "validTo" : "2123-05-01T00:00:00Z", "loginTime" : "2024-01-01T11:22:33Z", "userUuid" : "<GLOBAL_USER_ID>", "userUuidHistory" : [ { "value" : "<GLOBAL_USER_ID>", "active" : true }, { "value" : "<GLOBAL_USER_ID_OLD>", "active" : false } ] }
```
Extension name: urn:ietf:params:scim:schemas:extension:sap.odm:2.0:User
The following singular attributes are defined:
- workAssignment : Contains employee information
- id : Business partner ID
- startDate : Valid From date of an employee
- endDate : Valid T o date of an employee
- primary : Employee is primary
```
 Sample Code "urn:ietf:params:scim:schemas:extension:sap.odm:2.0:User" : { "workAssignment" : [ { "id" : "0000000001", "startDate" : "2000-01-01T00:00:00Z", "endDate" : "9999-12-31T23:59:59Z", "primary" : true } ] }
```
Extension name: urn:ietf:params:scim:schemas:extension:sap:2.0:Group
The following singular attributes are defined:
- type : Describes whether the group is a business role ( authorization ) or a business user group ( userGroup )
- supportedOperations : Describes the possible operations that can be performed either with the group membership or readWrite
Example
```
 Sample Code "urn:ietf:params:scim:schemas:extension:sap:2.0:Group": { "type": "authorization" "supportedOperations": "membership" }
```
## Parameter Equivalents in your Cloud system
User
Parameter in SCIM Standard
Equivalent in your Cloud System
| id             | Unique business user ID                                          |
|----------------|------------------------------------------------------------------|
| externalId     | worker/employee ID                                               |
| userName       | user name                                                        |
| groups["type"] | Determines whether it is a business role or business user group. |
Group
Parameter in SCIM Standard
| id         | Unique internal ID for SCIM containing a prefix ( BROL_ or BUGR_ ) and the business role or business user group ID to ensure that no duplicates exist. This ID has no correspond- ing Cloud equivalent.   |
|------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| externalId | Business role or business user group ID                                                                                                                                                                   |
## Related Information
```
System for cross-domain Identity Management Example: User Endpoint [page 1069] Example: Group Endpoint [page 1070]
```