SCIM support for the control plane #1617

Closed
opened 2025-11-20 05:33:59 -05:00 by saavagebueno · 5 comments
Owner

Originally created by @Kamillaova on GitHub (Feb 12, 2025).

SCIM is a standardized way to synchronize users between an application and an IdP (or an IdP with an IdP), AFAIU Netbird currently has no way to synchronize (in real time) Netbird's ACL groups from an IdP, adding SCIM support would solve that problem.

Such a task could also be implemented by using IdP-specific API endpoints or so, but that's not good since it's an IdP-specific solution.
For example, #2073. If retrieving user information was implemented in a standardized way, this problem wouldn't exist. (I also really can't understand why it's implemented in an IdP-specific way, lol)

I also seen this comment from 2023: https://github.com/zitadel/zitadel/discussions/1931#discussioncomment-6811828

Originally created by @Kamillaova on GitHub (Feb 12, 2025). SCIM is a standardized way to synchronize users between an application and an IdP (or an IdP with an IdP), AFAIU Netbird currently has no way to synchronize (in real time) Netbird's ACL groups from an IdP, adding SCIM support would solve that problem. Such a task could also be implemented by using IdP-specific API endpoints or so, but that's not good since it's an IdP-specific solution. For example, #2073. If retrieving user information was implemented in a standardized way, this problem wouldn't exist. (I also really can't understand why it's implemented in an IdP-specific way, lol) I also seen this comment from 2023: https://github.com/zitadel/zitadel/discussions/1931#discussioncomment-6811828
saavagebueno added the feature-request label 2025-11-20 05:33:59 -05:00
Author
Owner

@1nerdyguy commented on GitHub (Feb 12, 2025):

correct me if I'm wrong, but isn't SCIM sync a feature of hosted netbird?

@1nerdyguy commented on GitHub (Feb 12, 2025): correct me if I'm wrong, but isn't SCIM sync a feature of hosted netbird?
Author
Owner

@Kamillaova commented on GitHub (Feb 12, 2025):

Feature of hosted netbird - syncing from azure ad, okta, google ws, but not with generic SCIM

@Kamillaova commented on GitHub (Feb 12, 2025): Feature of hosted netbird - syncing from azure ad, okta, google ws, but not with generic SCIM
Author
Owner

@stewart-veepshosting commented on GitHub (Apr 23, 2025):

We are currently well down the evaluation process with Netbird and while not a deal breaker the ability to support KeyCloak or really any other openid based solution would really open up our ability to make this fly for a much larger audience.

@stewart-veepshosting commented on GitHub (Apr 23, 2025): We are currently well down the evaluation process with Netbird and while not a deal breaker the ability to support KeyCloak or really any other openid based solution would really open up our ability to make this fly for a much larger audience.
Author
Owner

@mlsmaycon commented on GitHub (Apr 23, 2025):

Hello Folks, SCIM is a feature supported only on our cloud version. We do offer this version as a product. If you would be interested, you can reach out via https://netbird.io/demo?form=enterprise to learn more.

@mlsmaycon commented on GitHub (Apr 23, 2025): Hello Folks, SCIM is a feature supported only on our cloud version. We do offer this version as a product. If you would be interested, you can reach out via https://netbird.io/demo?form=enterprise to learn more.
Author
Owner

@Kamillaova commented on GitHub (Apr 23, 2025):

If it is supported in the cloud version, why is it not mentioned in the documentation?

@Kamillaova commented on GitHub (Apr 23, 2025): If it is supported in the cloud version, why is it not mentioned in the documentation?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1617