Beta

Create a tenant

A new tenant starts with its own users, OAuth settings, audit history and logs. You are its first Tenant Admin.

SCIM payload validator

Check a SCIM 2.0 message against the core schema and protocol: users, groups, PATCH operations, bulk requests, list responses and errors.

Everything happens in this browser. What you paste is not sent or stored, and leaving the page clears it.

Message

The request or response body. The validator recognizes the message from its schemas.

A client must not rely on read-only attributes such as id, and a service must never return a password.

What the validator checks

It checks the attributes RFC 7643 defines for users, the enterprise user extension and groups: names (compared without case), types, single and multi-valued attributes, required and read-only attributes, and canonical values. For protocol messages it follows RFC 7644: PATCH operations and their paths and filters, bulk operations and their bulkId references, list responses and error responses. A service may store fewer attributes or add its own rules; its /Schemas endpoint describes them. The SCIM guide lists what a Beyond the Login tenant stores.

We value your privacy

We use cookies and similar technologies to enhance your browsing experience, and analytics to understand our traffic. By clicking "Allow all", you consent to optional analytics. Cookie Policy

Tools