Create, update, disable, patch, filter, and paginate SCIM resources with Okta-compatible behavior.
Access boundary SAML + TokensSAML protects operator access while SCIM endpoints use scoped integration tokens.
Authority bridge Okta + FreeIPAOkta remains the human identity authority while FreeIPA remains the Linux enforcement authority.
Assurance Execution gatesHealth checks, route inventory, SCIM mutation audit, runtime survivability, and rollback readiness stay visible.
Operational handoff TeamDynamix + ITSM contextEscalations carry identity evidence into ticket workflows without turning FreeSCIM into a ticketing system.
Identity fabric
Unify identity authority without pretending there is only one source of truth.
Enterprise identity rarely lives in one clean place. FreeSCIM presents a SCIM-centered control plane where SSO providers, LDAP, FreeIPA, Linux systems, Windows-style identity environments, application federation targets, ITSM workflows, and custom IdM authorities can be modeled through common lifecycle contracts without hiding who owns enforcement, approval, or recovery.
Follow the data flowCurrent platform posture
More than a bridge: an evidence-led operating layer.
Controlled execution
Mutation audit, dry-run controls, and approval gates separate observed state from write execution.
Identity provenance
Canonical identity views preserve the difference between login, contact email, SCIM username, FreeIPA uid, and Kerberos principal.
Runtime survivability
Health, readiness, middleware status, and blocked/degraded states are treated as product behavior, not hidden logs.
Recoverable operations
Rollback candidates, safety checks, and ITSM context help operators answer what happened, why it was allowed, and how to recover.
Lifecycle operations
Built around the actions identity teams actually need.
Create
Provision users through predictable SCIM resource contracts, mapped attributes, and FreeIPA-safe username handling.
Update
Keep profile, email, manager, and authority-backed state aligned as identity data changes.
Disable
Represent deactivation as a first-class lifecycle state that maps to enforceable account lock behavior.
Reconcile
Compare provider and FreeIPA snapshots, preview drift, and reason about safe changes before execution.
Mixed enterprise estates
Mesh Linux identity operations with Windows-centered enterprise identity.
FreeSCIM’s story is the hard middle: translating lifecycle intent between SSO providers, FreeIPA, Linux enforcement, Windows-centered enterprise identity, application platforms, ITSM handoffs, and APIs without hiding operational boundaries.
API platform proof
SCIM contracts are the product surface.
Operational evidence