SCIM API · Gitlab 中文文檔

# SCIM API > 原文：[https://docs.gitlab.com/ee/api/scim.html](https://docs.gitlab.com/ee/api/scim.html) * [Get a list of SAML users](#get-a-list-of-saml-users) * [Get a single SAML user](#get-a-single-saml-user) * [Create a SAML user](#create-a-saml-user) * [Update a single SAML user](#update-a-single-saml-user) * [Remove a single SAML user](#remove-a-single-saml-user) * [Available filters](#available-filters) * [Available operations](#available-operations) # SCIM API[](#scim-api-silver-only "Permalink") [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/9388) in [GitLab Silver](https://about.gitlab.com/pricing/) 11.10. SCIM API 實現[RFC7644 協議](https://tools.ietf.org/html/rfc7644) . **警告：**此 API 供內部系統用于與 SCIM 提供程序連接. 雖然可以直接使用，但如有更改，恕不另行通知.**注意：**必須為組啟用[組 SSO](../user/group/saml_sso/index.html) . 有關更多信息，請參見[SCIM 設置文檔](../user/group/saml_sso/scim_setup.html#requirements) . ## Get a list of SAML users[](#get-a-list-of-saml-users "Permalink") **注意：**此端點用作 SCIM 同步機制的一部分，并且它僅基于唯一 ID（應與用戶的`extern_uid`相匹配）返回一個用戶. ``` GET /api/scim/v2/groups/:group_path/Users ``` Parameters: | Attribute | Type | Required | Description | | --- | --- | --- | --- | | `filter` | string | no | A [filter](#available-filters) expression. | | `group_path` | string | yes | 組的完整路徑. | | `startIndex` | integer | no | 從 1 開始的索引，指示從何處開始返回結果. 小于 1 的值將被解釋為 1. | | `count` | integer | no | 所需的最大查詢結果數. | **注意：**分頁遵循[SCIM 規范，](https://tools.ietf.org/html/rfc7644#section-3.4.2.4)而不是其他地方使用的 GitLab 分頁. 如果記錄在請求之間更改，則頁面可能丟失已移至其他頁面的記錄，或者重復上一個請求的記錄. 請求示例： ``` curl 'https://example.gitlab.com/api/scim/v2/groups/test_group/Users?filter=id%20eq%20"0b1d561c-21ff-4092-beab-8154b17f82f2"' --header "Authorization: Bearer <your_scim_token>" --header "Content-Type: application/scim+json" ``` 響應示例： ``` { "schemas": [ "urn:ietf:params:scim:api:messages:2.0:ListResponse" ], "totalResults": 1, "itemsPerPage": 20, "startIndex": 1, "Resources": [ { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User" ], "id": "0b1d561c-21ff-4092-beab-8154b17f82f2", "active": true, "name.formatted": "Test User", "userName": "username", "meta": { "resourceType":"User" }, "emails": [ { "type": "work", "value": "name@example.com", "primary": true } ] } ] } ``` ## Get a single SAML user[](#get-a-single-saml-user "Permalink") ``` GET /api/scim/v2/groups/:group_path/Users/:id ``` Parameters: | Attribute | Type | Required | Description | | --- | --- | --- | --- | | `id` | string | yes | 用戶的外部 UID. | | `group_path` | string | yes | 組的完整路徑. | 請求示例： ``` curl "https://example.gitlab.com/api/scim/v2/groups/test_group/Users/f0b1d561c-21ff-4092-beab-8154b17f82f2" --header "Authorization: Bearer <your_scim_token>" --header "Content-Type: application/scim+json" ``` 響應示例： ``` { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User" ], "id": "0b1d561c-21ff-4092-beab-8154b17f82f2", "active": true, "name.formatted": "Test User", "userName": "username", "meta": { "resourceType":"User" }, "emails": [ { "type": "work", "value": "name@example.com", "primary": true } ] } ``` ## Create a SAML user[](#create-a-saml-user "Permalink") ``` POST /api/scim/v2/groups/:group_path/Users/ ``` Parameters: | Attribute | Type | Required | Description | | --- | --- | --- | --- | | `externalId` | string | yes | 用戶的外部 UID. | | `userName` | string | yes | 用戶的用戶名. | | `emails` | JSON 字符串 | yes | 工作電子郵件. | | `name` | JSON 字符串 | yes | 用戶名. | | `meta` | string | no | 資源類型（ `User` ）. | 請求示例： ``` curl --verbose --request POST "https://example.gitlab.com/api/scim/v2/groups/test_group/Users" --data '{"externalId":"test_uid","active":null,"userName":"username","emails":[{"primary":true,"type":"work","value":"name@example.com"}],"name":{"formatted":"Test User","familyName":"User","givenName":"Test"},"schemas":["urn:ietf:params:scim:schemas:core:2.0:User"],"meta":{"resourceType":"User"}}' --header "Authorization: Bearer <your_scim_token>" --header "Content-Type: application/scim+json" ``` 響應示例： ``` { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:User" ], "id": "0b1d561c-21ff-4092-beab-8154b17f82f2", "active": true, "name.formatted": "Test User", "userName": "username", "meta": { "resourceType":"User" }, "emails": [ { "type": "work", "value": "name@example.com", "primary": true } ] } ``` 如果成功，則返回`201`狀態代碼. ## Update a single SAML user[](#update-a-single-saml-user "Permalink") 可以更新的字段是： | SCIM / IdP 字段 | GitLab 領域 | | --- | --- | | `id/externalId` | `extern_uid` | | `name.formatted` | `name` | | `emails\[type eq "work"\].value` | `email` | | `active` | 如果`active` = `false`刪除身份 | | `userName` | `username` | ``` PATCH /api/scim/v2/groups/:group_path/Users/:id ``` Parameters: | Attribute | Type | Required | Description | | --- | --- | --- | --- | | `id` | string | yes | 用戶的外部 UID. | | `group_path` | string | yes | 組的完整路徑. | | `Operations` | JSON 字符串 | yes | An [operations](#available-operations) expression. | 請求示例： ``` curl --verbose --request PATCH "https://example.gitlab.com/api/scim/v2/groups/test_group/Users/f0b1d561c-21ff-4092-beab-8154b17f82f2" --data '{ "Operations": [{"op":"Add","path":"name.formatted","value":"New Name"}] }' --header "Authorization: Bearer <your_scim_token>" --header "Content-Type: application/scim+json" ``` 如果成功，則返回帶有`204`狀態代碼的空響應. ## Remove a single SAML user[](#remove-a-single-saml-user "Permalink") 刪除用戶的 SSO 身份和組成員身份. ``` DELETE /api/scim/v2/groups/:group_path/Users/:id ``` Parameters: | Attribute | Type | Required | Description | | --- | --- | --- | --- | | `id` | string | yes | 用戶的外部 UID. | | `group_path` | string | yes | 組的完整路徑. | 請求示例： ``` curl --verbose --request DELETE "https://example.gitlab.com/api/scim/v2/groups/test_group/Users/f0b1d561c-21ff-4092-beab-8154b17f82f2" --header "Authorization: Bearer <your_scim_token>" --header "Content-Type: application/scim+json" ``` 如果成功，則返回帶有`204`狀態代碼的空響應. ## Available filters[](#available-filters "Permalink") 它們與[RFC7644 過濾部分中](https://tools.ietf.org/html/rfc7644#section-3.4.2.2)指定的表達式匹配. | Filter | Description | | --- | --- | | `eq` | 該屬性與指定值完全匹配. | Example: ``` id eq a-b-c-d ``` ## Available operations[](#available-operations "Permalink") They perform an operation as specified in [the RFC7644 update section](https://tools.ietf.org/html/rfc7644#section-3.5.2). | Operator | Description | | --- | --- | | `Replace` | 該屬性的值已更新. | | `Add` | 該屬性具有新值. | Example: ``` { "op": "Add", "path": "name.formatted", "value": "New Name" } ```