SCIM Token Validity Check

Rule Details

**Table 1** Rule details
Parameter	Description
Rule Name	identitycenter-scim-token-expiration-check
Identifier	SCIM Token Validity Check
Description	If the remaining validity period of an SCIM token is less than the specified period, this policy is non-compliant.
Tag	identitycenter
Trigger Type	Periodic
Filter Type	identitycenter.scim
Rule Parameters	daysToExpiration: the number of days before the token expires. The default value is 90.

Application Scenarios

IAM Identity Center supports automatic user/user group information synchronization from an identity provider (IdP) using the cross-domain identity management system (SCIM) v2.0 protocol. When configuring SCIM-based synchronization, you can map IdP user attributes to IAM Identity Center name attributes, which ensures that the matches between them.

Solution

When the SCIM token is about to expire, obtain a new access token. For details, see Generating or Deleting an Access Token.

Rule Logic

If the remaining validity period of an SCIM token is less than the specified period, this policy is non-compliant.
If the remaining validity period of an SCIM token is longer than the specified period, this policy is compliant.

Parent topic: IAM Identity Center

Previous topic: IdP Certificate Validity Check

Next topic: Workspace