**As** a SCIM client
**I want to** update OpenProject with user changes
**so that** OpenProject Begin of the deletion has theirEnd of the deletion users Begin of the insertionstayEnd of the insertion in sync with the Begin of the insertionIdentity Provider (IdP)End of the insertion Begin of the deletion idPEnd of the deletion

**Acceptance criteria**

* Begin of the insertionImplementEnd of the insertion CRUD API endpoints Begin of the deletion are implementedEnd of the deletion according to Begin of the insertionSCIM specifications.End of the insertion Begin of the deletion specification..End of the deletion

* Begin of the insertionUserEnd of the insertion Begin of the deletion TheEnd of the deletion changes Begin of the insertionare processedEnd of the insertion Begin of the deletion should be doneEnd of the deletion by a Begin of the insertionsystem-levelEnd of the insertion Begin of the deletion systemEnd of the deletion user Begin of the insertion(pending clarification if a dedicated "SCIM User" is needed).End of the insertion Begin of the deletion (needs clarification)

* <br>End of the deletion


Begin of the insertion<br>

End of the insertion **Technical notes**

* Begin of the insertionPrefer utilizingEnd of the insertion Begin of the deletion Best would be to useEnd of the deletion an existing Begin of the insertionSCIM RubyEnd of the insertion gem Begin of the insertionto streamline development and ensure specification compliance.

<br>End of the insertion


Begin of the deletion **Open Questions**

* Should it be the System user or a specific other user like &quot;SCIM user&quot;?


End of the deletion **Permissions and visibility considerations**

* Begin of the insertionAPI access is restricted to administrators.End of the insertion Begin of the deletion Admins onlyEnd of the deletion

* Begin of the insertionAvailable onlyEnd of the insertion Begin of the deletion OnlyEnd of the deletion when Begin of the insertiontheEnd of the insertion Enterprise Begin of the insertionplan withEnd of the insertion Begin of the deletion plan:End of the deletion Corporate is active.


Begin of the insertion<br>

End of the insertion **Out of scope**

* Begin of the insertionAdvanced attribute synchronization beyond basic CRUD operations.

* Token expiration and advanced scope management.

End of the insertion <br>