SCIM implementation for Spring Boot SAML and OKTA

user_2118745 0
Viewed 2448

My requirement is to implement SCIM 2.0 server for Spring Boot application which supports SAML for OKTA authentication.

I haven't found any library provided by Spring Boot for SCIM sever and neither the documentation exists for it in Spring's Repos.

I have found some third party implementations like Better Cloud SCIM 2.0 or WSO2 Charon etc. But should I use those third party implementations ? Because what if their git hub repos are messed up later or we may not get our issues resolved.

Also if there does not exist any documentation for SCIM server implementation in Spring Boot. Then should it just be treated as implementing other restful APIs ?

Any help on this will be much appreciated.

scim spring-saml scim2
2 Answers

I'm watching over my company's SCIM API. So far what I have seen is there's no Spring official library and you should stick to the protocol description to provide your implementation (see more here: https://www.rfc-editor.org/rfc/rfc7644).

Despite the lack of an official Spring Boot library (that would be cool, I agree!), I'm using this thirty party library: https://github.com/pingidentity/scim2. It has all the resources you need to expose your endpoints for users operations as well as filtering when getting users, that can become quite complicated implementing from scratch as the specification provides a quite extensive query language for it.

user_7705570

Open source version for a lightweight SCIM spring-boot server.

https://bitbucket.org/wouter29/personify-scim-server/src

For using SAML, a custom java authentication filter can be plugged in, because only Basic and Bearer tokens are implemented. Don't know if SAML is even mentioned in the specs/RFC

Storage layer can be chosen : ldap, mongo, postgres or MySQL.

user_94233900
Related