Level up your Box knowledge with brand new learning paths on Box University. Visit training.box.com to get started

Box Status

Box API is SCIM

Follow
New post
高瀬　梨余
I am wondering if Box API is SCIM compliant in terms of user administrating automation (user create, update, delete).
If Box API is SCIM compliant, it would be also helpful if you can provide me with any reference guide (URLs) for that API.
0

Comments

5 comments

Date Votes
  • Rui Barbosa

    Hi Takase,

    Looking at our SSO documentation, that you can find here for more details, it doesn't specifically say it is SCIM compliant.

    However it does support single sign on (SSO) using the standard SAML assertions and it does allow you to set up auto provisioning and deprovisioning.

    Let us know if this helps with your use case.

    Best regards

     

    0
    Comment actions Permalink
  • 高瀬　梨余
    Hi Rui,
     
    Thank you for your suggestion.
     
    SCIM is a standardized protocol for account administration/management (see the following link for details), and not for SSO.
     
    Box has APIs for account administration/management (an example reference url follows), but those APIs do not seem SCIM compliant. (for example, userName attribute is required in SCIM but not in Box API)
     
    If you are aware of any Box API reference for user creation other than the link above, please let me know.
     
    Regards
    0
    Comment actions Permalink
  • Rui Barbosa

    Hi Takase,

    What is your ultimate goal?

    If it is auto-provisioning and de-provisioning users in box via some 3rd party identity provider, then please look at this document to see if it supports your preferrer vendor.

    If not, please help me understand your use case.

    Best regards

    0
    Comment actions Permalink
  • 高瀬　梨余
    Hi Rui,
     
    It is my ultimate goal to automate provisioning and deprovisioning users in box via SCIM protocol, because I have a SCIM-compliant tool at hand and would like to use the tool for the automation.
    This is the reason why I asked whether the box API for user administration is SCIM compliant.
     
    Regards
    0
    Comment actions Permalink
  • Rui Barbosa

    Hi Takase,

    I understand. We do not have generic SCIM compliant end points that you can use, although Box does provide integrations with most identity providers, even generic ones.

    I do invite you to read this note:

    https://support.box.com/hc/en-us/articles/360043696514-Setting-Up-Single-Sign-On-SSO-for-your-Enterprise#ssoonyourown

    Best regards 

     

    1
    Comment actions Permalink

Please sign in to leave a comment.