了解 PAM360 SCIM API

简介

SCIM API 是实现跨不同系统和应用程序无缝集成身份管理流程的基础。借助 PAM360 中的 SCIM 实现 ，SCIM API 使管理员能够自动化用户和组的配置任务，确保对关键资源访问的高效管理。SCIM API 采用 GET、POST、PUT、PATCH 和 DELETE 方法，提供广泛的 CRUD 操作。

要访问 PAM360 SCIM API，必须通过 PAM360 进行身份验证。这包括创建具有相应角色的 REST API 用户账户，并使用生成的用户身份验证令牌进行身份验证。生成的身份验证令牌可通过以下两种方式发送以完成身份验证：

  • 作为身份验证令牌标头，类似于 REST API。
  • 作为授权标头中的 Bearer 令牌。

本文档将帮助您了解受支持的 SCIM 端点、API 和属性。受支持的 SCIM 端点如下所示：

用户

组

SCIM 配置

SCIM 配置

模式

资源类型

1. 用户

若要在 PAM360 中管理用户，可使用本节提供的 PAM360 SCIM API。

支持的核心属性

属性 数据类型 必填？（针对 POST） 必填？（针对 PUT）

用户名

字符串

是

否

givenName

字符串

是

是

姓氏

字符串

是

是

电子邮件

数组

是

是

密码

字符串

否

否

角色

数组

是

否

是否活跃

布尔值

是

否

支持的自定义架构扩展属性

urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User:userType

urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User:domain

属性 类型 描述

用户类型

0 | 1 | 2 | 3

用户类型。0 - 本地用户，1 - AD，2 - Entra ID，3 - LDAP。

域

字符串

域用户所属的域。

以下是针对 User 端点的 PAM360 SCIM API：

1.1 获取用户

描述

用于获取 PAM360 中用户的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/{userId}

HTTP 方法

GET

示例请求

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/2101

响应示例

	{
      "emails": [
        {
          "type": "work",
          "value": "john@teams.com",
          "primary": true
        }
      ],
      "roles": [
        {
		  "value": "特权管理员",
          "primary": true
        }
      ],
      "meta": {
		"created": "2024-02-29 13:54:37.451",
        "location": "https://192.168.176.251:8282/scim/v2/Users/2101",
        "resourceType": "User"
      },
	  "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
      ],
      "name": {
        "givenName": "John",
        "familyName": "G"
      },
      "active": true,
	  "id": 2101,
      "userName": "john@teams.onmicrosoft.com",
      "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User": {
        "userType": "0"
      }
    }

1.2 获取所有用户

描述

用于获取 PAM360 中所有用户的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users

HTTP 方法

GET

查询语法

利用 SCIM 端点根据属性查询用户。每个查询包含一个运算符、一个属性及属性值，格式如下：

<baseURL>/scim/users?filter=<attribute> <operator> "<attributeValue>"

支持的属性

属性

用户名

根据用户名识别用户。

active

根据用户的状态返回用户列表，状态值为 `true`（活跃）或 `false`（非活跃）。

支持的运算符

运算符 定义

eq

equals

sw

以...开头

co

包含

ew

以...结尾

请求示例

查询时，

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users?filter=userName eq "test1"
	https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Users?filter=active eq "true"

用于分页，

	https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Users?startIndex=1&count=50
	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users?startIndex=51&count=50

结合查询和分页，

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users?filter=userName eq "test1"&startIndex=1&count=50

响应示例

	{
      "totalResults": 2,
      "startIndex": 1,
      "itemsPerPage": 100,
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:ListResponse"
      ],
	  "Resources": [
        {
          "emails": [
            {
              "type": "work",
              "value": "guest@teams.onmicrosoft.com",
              "primary": true
            }
		  ],
          "meta": {
            "created": "2024-04-02 11:04:45.235",
            "location": "https://<PAM360服务器的主机名或IP地址>:<端口>/scim/v2/Users/2",
			"resourceType": "User"
          ],
          "roles": [
            {
              "value": "Password User",
              "primary": true
            }
          ],
		  "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User": {
            "userType": "0"
          ],
          "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:User",
			"urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User"
          ],
          "name": {
            "givenName": "guest",
            "familyName": ""
		  },
          "active": true,
          "id": 2,
          "userName": "guest"
        },
        {
          "emails": [
            {
              "type": "work",
			  "value": "aaaadmin@teams.onmicrosoft.com",
              "primary": true
            }
          ],
          "meta": {
            "created": "2024-04-02 11:04:45.235",
			"location": "https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Users/1",
            "resourceType": "User"
          ],
          "roles": [
            {
			  "value": "特权管理员",
              "primary": true
            }
          ],
          "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User": {
            "userType": "0"
          ],
		  "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:User",
            "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User"
          ],
		  "name": {
            "givenName": "admin",
            "familyName": ""
          },
          "active": true,
          "id": 1,
          "userName": "admin"
        }
      ]
    }

1.3 创建新用户

描述

向 PAM360 创建新用户或 Entra 域用户。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users

HTTP 方法

POST

示例请求

	{
      "userName": "john@teams.onmicrosoft.com",
      "name": {
        "givenName": "John",
        "familyName": "G"
      },
      "emails": [
        {
		  "type": "work",
          "value": "john@teams.com",
          "primary": true
        }
      ],
      "roles": [
        {
          "value": "特权管理员",
          "primary": true
        }
	  ],
      "active": true,
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User",
        "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User"
      ],
	  "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User": {
        "userType": "0"
      }
    }

要在 PAM360 中创建 Entra 域用户，

	{
      "userName": "john@teams.onmicrosoft.com",
      "name": {
        "givenName": "John",
        "familyName": "G"
      },
      "emails": [
        {
		  "type": "work",
          "value": "john@teams.com",
          "primary": true
        }
      ],
      "roles": [
        {
          "value": "特权管理员",
          "primary": true
        }
	  ],
      "active": true,
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User",
        "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User"
      ],
	  "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User": {
        "userType": "2",
        "domain": "teams.onmicrosoft.com"
      }
    }

示例响应

	{
      "emails": [
        {
          "type": "work",
          "value": "john@teams.com",
          "primary": true
        }
      ],
	  "meta": {
        "location": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/601",
        "resourceType": "User"
      },
      "roles": [
        {
		  "value": "特权管理员",
          "primary": true
        }
      ],
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
      ],
	  "name": {
        "givenName": "John",
        "familyName": "G"
      },
      "active": true,
      "id": 601,
      "userName": "john@teams.onmicrosoft.com"
    }

1.4 更新用户详细信息

描述

用于更新 PAM360 中用户的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Users/{userId}

HTTP 方法

PUT

示例请求

	{
      "userName": "john@teams.onmicrosoft.com",
      "name": {
        "givenName": "John",
        "familyName": "Doe"
      },
      "emails": [
        {
		  "type": "work",
          "value": "john.doe@teams.com",
          "primary": true
        }
      ],
      "roles": [
        {
		  "value": "密码用户",
          "primary": true
        }
      ],
      "active": true,
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
      ]
    }

响应示例

	{
      "emails": [
        {
          "type": "work",
          "value": "john.doe@teams.com",
          "primary": true
        }
      ],
	  "meta": {
        "location": "https://<PAM360服务器的主机名或IP地址>:<端口号>/scim/v2/Users/601",
        "resourceType": "User"
      },
      "roles": [
        {
		  "value": "密码用户",
          "primary": true
        }
      ],
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
      ],
	  "name": {
        "givenName": "John",
        "familyName": "Doe"
      },
      "active": true,
      "id": 601,
      "userName": "john@teams.onmicrosoft.com"
    }

1.5 更新用户详细信息

描述

用于更新用户的特定值。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Users/{userId}

HTTP 方法

PATCH

支持的路径值

路径 值的資料類型

active

布尔

电子邮件

数组

emails[type eq \"work\"].value

字符串

name

JSON 对象

name.familyName

字符串

name.givenName

字符串

角色

数组

roles[primary eq\"True\"].value

字符串

请求示例

	{
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
      ],
      "Operations": [
        {
          "op": "Replace",
		  "path": "active",
          "value": true
        },
        {
          "op": "Replace",
          "path": "name.familyName",
          "value": "asdf"
        }
      ]
    }

要更改用户的电子邮件地址，

	{
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
      ],
      "Operations": [
        {
		  "op": "Replace",
          "path": "emails[type eq \"work\"].value",
          "value": true
        }
      ]
    }

要更改用户的角色，

	{
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
      ],
      "Operations": [
        {
		  "op": "Replace",
          "path": "roles[primary eq \"True\"].value",
          "value": "Password User"
        }
      ]
    }

响应示例

更新成功后，您将收到 HTTP 状态码 204。


2. 组

在 PAM360 中管理通过 SCIM 配置的组。

支持的核心属性

属性 描述

displayName

根据显示名称识别一个组。

id

根据 ID 识别一个组。

成员

提供与该组关联的用户列表。

以下是 PAM360 用于组端点的 SCIM API：

2.1 获取组详细信息

描述

用于获取已添加到 PAM360 的组的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups/{groupId}

HTTP 方法

GET

示例请求

	https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Groups/1202

响应示例

	{
      "displayName": "Group4",
      "meta": {
        "created": "2024-01-30 14:01:08.461",
		"location": "https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Groups/1202",
        "resourceType": "Group"
      },
      "members": [
        {
		  "value": 9,
          "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/9"
        },
        {
		  "value": 301,
          "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/301"
        }
      ],
	  "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:Group"
      ],
      "id": 1202
    }

2.2 获取所有群组的详细信息

描述

获取已添加到 PAM360 的所有群组的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups

HTTP 方法

GET

查询语法

利用 SCIM 端点根据属性查询组。每个查询包含一个运算符、一个属性及属性值，格式如下：

<baseURL>/scim/groups?filter=<attribute> <operator> "<attributeValue>"

支持的属性

属性 描述

displayName

根据显示名称识别一个组。

支持的运算符

运算符 定义

eq

等于

sw

以...开头

co

包含

ew

以...结尾

请求示例

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups

查询时，

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups?filter=displayName eq "group1"

用于分页，

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups?startIndex=1&count=50
	https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Groups?startIndex=51&count=50

结合查询和分页，

	https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Groups?filter=displayName eq "group1"&startIndex=1&count=50

响应示例

	{
      "totalResults": 7,
      "startIndex": 6,
      "itemsPerPage": 2,
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:ListResponse"
      ],
      "Resources": [
        {
		  "displayName": "Group4",
          "meta": {
            "created": "2024-01-30 14:01:08.461",
			"location": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups/1202",
            "resourceType": "Group"
          },
          "members": [
            {
			  "value": 301,
              "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/301"
            }
		  ],
          "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:Group"
          ],
          "id": 1202
        },
        {
          "displayName": "john",
          "meta": {
			"created": "2024-01-31 18:13:30.024",
            "location": "https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Groups/1501",
            "resourceType": "Group"
		  },
          "members": [
            {
              "value": 9,
              "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/9"
            }
		  ],
          "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:Group"
          ],
          "id": 1501
        }
      ]
    }

2.3 创建组

描述

向 PAM360 添加一个组。

URL

	https://<PAM360 服务器主机名 或 IP 地址>:<端口>/scim/v2/Groups

HTTP 方法

POST

示例请求

	{
      "displayName": "Group14",
      "meta": {
        "created": "2024-01-30 14:01:08.461",
        "resourceType": "Group"
      },
      "members": [
        {
		  "value": 9,
          "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/9"
        },
        {
          "value": 301,
		  "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/301"
        }
      ],
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:Group"
      ]
    }

响应示例

	{
      "displayName": "Group14",
	  "meta": {
        "created": "2024-01-30 14:01:08.461",
        "location": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups/2101",
		"resourceType": "Group"
      },
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:Group"
      ],
      "members": [
        {
		  "value": 9,
          "$ref": "https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Users/9"
        },
        {
		  "value": 301,
          "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/301"
        }
      ],
      "id": 2101
    }

2.4 更新组详情

描述

用于更新在 PAM360 中添加的组详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups/{groupId}

HTTP 方法

PUT

示例请求

	[
      {
        "displayName": "Group24",
        "schemas": [
          "urn:ietf:params:scim:schemas:core:2.0:Group"
        ],
		"members": [
          {
            "value": 9,
            "$ref": "https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Users/9"
          },
		  {
            "value": 2,
            "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Users/2"
          }
        ]
      }
    ]

响应示例

	{
      "displayName": "Group24",
	  "meta": {
        "created": "2024-01-30 14:01:08.461",
        "location": "https://<PAM360服务器主机名或IP地址>:<端口>/scim/v2/Groups/1202",
		"resourceType": "Group"
      },
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:Group"
      ],
      "members": [
        {
		  "value": 9,
          "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/9"
        },
        {
		  "value": 2,
          "$ref": "https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Users/2"
        }
      ],
      "id": 1202
    }

2.5 补丁组

描述

用于更新添加到 PAM360 中的组详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Groups/{groupId}

HTTP 方法

PATCH

示例请求

	{
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
      ],
      "Operations": [
        {
		  "op": "Replace",
          "path": "displayName",
          "value": "Group4"
        },
        {
          "op": "Add",
          "path": "members",
          "value": [
            {
			  "value": "1504"
            }
          ]
        },
        {
          "op": "Remove",
          "path": "members",
          "value": [
            {
			  "value": "1501"
            },
            {
              "value": "1502"
            }
          ]
        }
      ]
    }

响应示例

更新成功后，您将收到 HTTP 状态码 204。


2.6 删除组

描述

从 PAM360 中删除一个组。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/Groups/{groupId}

HTTP 方法

DELETE

示例请求

	https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Groups/2101

响应示例

删除成功后，您将收到 HTTP 状态码 204。


3. SCIM 配置

以下是 PAM360 SCIM API 针对 ServiceProviderConfig、Schemas 和 ResourceTypes 端点的接口：

3.1 ServiceProviderConfig

3.1.1 获取 SCIM 实现详情

描述

用于获取 PAM360 中 SCIM 实现的所有详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/ServiceProviderConfig

HTTP 方法

GET

示例请求

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/ServiceProviderConfig

响应示例

	{
      "patch": {
        "supported": true
      },
      "filter": {
		"maxResults": 0,
        "supported": true
      },
      "documentationUri": "https://www.manageengine.com/privileged-access-management/help/scim-config.html",
      "authenticationSchemes": [
        {
		  "documentationUri": "https://www.manageengine.com/privileged-access-management/help/scim-config.html",
          "name": "API Token",
          "description": "使用 API 令牌的身份验证方案",
		  "type": "apitoken",
          "primary": true
        },
        {
          "documentationUri": "https://www.manageengine.com/privileged-access-management/help/scim-config.html",
          "name": "OAuth Bearer Token",
		  "description": "使用 OAuth Bearer Token 标准的身份验证方案",
          "type": "oauthbearertoken",
          "primary": false
        }
      ],
      "meta": {
        "location": "/ServiceProviderConfig",
		"resourceType": "ServiceProviderConfig"
      },
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig"
      ],
      "etag": {
        "supported": false
      },
      "sort": {
		"supported": false
      },
      "bulk": {
        "maxPayloadSize": 0,
        "maxOperations": 0,
        "supported": false
      },
      "changePassword": {
        "supported": false
      }
    }

3.2 模式

3.2.1 获取模式

描述

通过 ID 获取模式。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Schemas/{schemaId}

HTTP 方法

GET

示例请求

	https://<PAM360 服务器主机名或 IP 地址>:<端口>/scim/v2/Schemas/urn:ietf:params:scim:schemas:core:2.0:Group

响应示例

	{
      "meta": {
        "location": "Schemas/urn:ietf:params:scim:schemas:core:2.0:Group",
        "resourceType": "Schema"
      },
      "name": "Group",
      "description": "Group",
	  "attributes": [
        {
          "uniqueness": "none",
          "name": "displayName",
          "mutability": "readWrite",
          "type": "string",
		  "multiValued": false,
          "caseExact": false,
          "returned": "default",
          "required": false
        },
        {
          "name": "members",
          "mutability": "readWrite",
		  "type": "complex",
          "multiValued": true,
          "returned": "default",
          "required": false,
          "subAttributes": [
            {
              "uniqueness": "none",
			  "name": "value",
              "description": "本组的成员标识符。",
              "mutability": "immutable",
              "type": "string",
              "multiValued": false,
              "caseExact": false,
			  "returned": "default",
              "required": false
            },
            {
              "uniqueness": "none",
              "name": "$ref",
              "description": "该组成员的位置。",
			  "mutability": "immutable",
              "type": "string",
              "multiValued": false,
              "caseExact": false,
              "returned": "default",
              "required": false
            }
		  ]
        }
      ],
      "id": "urn:ietf:params:scim:schemas:core:2.0:Group"
    }

3.2.2 获取所有架构

描述

用于获取 PAM360 中已实现的所有模式及支持的参数。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Schemas

HTTP 方法

GET

示例请求

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/Schemas

响应示例

	{
      "startIndex": 1,
      "totalResults": 3,
      "itemsPerPage": 100,
      "Resources": [
        {
          "meta": {
            "location": "/Schemas/urn:ietf:params:scim:schemas:core:2.0:User",
			"resourceType": "Schema"
          },
          "name": "User",
          "description": "用户账户",
          "attributes": [
            {
              "uniqueness": "server",
              "name": "userName",
			  "mutability": "immutable",
              "type": "string",
              "multiValued": false,
              "caseExact": false,
              "returned": "default",
              "required": true
            },
            {
              "uniqueness": "none",
			  "name": "name",
              "mutability": "readWrite",
              "type": "complex",
              "multiValued": false,
              "returned": "default",
              "required": false,
              "subAttributes": [
                {
				  "唯一性": "无",
                  "名称": "姓氏",
                  "可变性": "读写",
                  "类型": "字符串",
                  "多值": false,
                  "大小写敏感": false,
				  "returned": "default",
                  "required": false
                },
                {
                  "uniqueness": "none",
                  "name": "givenName",
                  "mutability": "readWrite",
                  "type": "string",
				  "multiValued": false,
                  "caseExact": false,
                  "returned": "default",
                  "required": false
                }
              ]
            },
            {
              "name": "active",
              "mutability": "读写",
              "type": "boolean",
              "multiValued": false,
              "returned": "default",
              "required": false
            },
            {
              "uniqueness": "none",
              "name": "password",
			  "可变性": "只读",
              "类型": "字符串",
              "多值": false,
              "大小写敏感": false,
              "返回": "从不",
              "必填": false
            },
            {
			  "唯一性": "无",
              "名称": "emails",
              "可变性": "读写",
              "类型": "复合",
              "多值": true,
              "返回值": "默认",
              "必填": false,
			  "子属性": [
                {
                  "唯一性": "无",
                  "名称": "value",
                  "可变性": "读写",
                  "类型": "字符串",
                  "多值": false,
                  "大小写敏感": false,
				  "returned": "default",
                  "required": false
                },
                {
                  "uniqueness": "none",
                  "name": "type",
                  "canonicalValues": [
                    "work"
                  ],
				  "可变性": "读写",
                  "类型": "字符串",
                  "多值": false,
                  "大小写精确": false,
                  "返回值": "默认",
                  "必填": false
                },
                {
				  "name": "primary",
                  "mutability": "readWrite",
                  "type": "boolean",
                  "multiValued": false,
                  "returned": "default",
                  "required": false
                }
			  ]
            },
            {
              "name": "roles",
              "description": "用户角色的列表，这些角色共同定义了用户的身份，例如'密码用户'、'管理员'。",
			  "mutability": "readWrite",
              "type": "complex",
              "multiValued": true,
              "returned": "default",
              "required": false,
			  "子属性": [
                {
                  "唯一性": "无",
                  "名称": "值",
                  "描述": "角色的值。",
                  "可变性": "读写",
                  "类型": "字符串",
				  "multiValued": false,
                  "caseExact": false,
                  "returned": "default",
                  "required": false
                },
                {
                  "uniqueness": "none",
                  "name": "display",
				  "description": "一个易于理解的名称，主要用于显示目的。只读。",
                  "mutability": "readWrite",
                  "type": "string",
                  "multiValued": false,
                  "caseExact": false,
                  "returned": "default",
				  "required": false
                },
                {
                  "uniqueness": "none",
                  "name": "type",
                  "description": "一个标明该属性功能的标签。",
                  "canonicalValues": [],
                  "mutability": "readWrite",
                  "type": "string",
                  "multiValued": false,
                  "caseExact": false,
                  "returned": "default",
                  "required": false
                },
				{
                  "name": "primary",
                  "description": "一个布尔值，用于指示该属性的'primary'（主）或首选属性值。主属性值'true'必须且仅能出现一次。",
                  "mutability": "readWrite",
                  "type": "boolean",
				  "multiValued": false,
                  "returned": "default",
                  "required": false
                }
              ]
            }
          ],
          "id": "urn:ietf:params:scim:schemas:core:2.0:User"
		},
        {
          "meta": {
            "location": "Schemas/urn:ietf:params:scim:schemas:core:2.0:Group",
            "resourceType": "Schema"
          },
          "name": "Group",
          "description": "Group",
		  "attributes": [
            {
              "uniqueness": "none",
              "name": "displayName",
              "mutability": "readWrite",
              "type": "string",
              "multiValued": false,
              "caseExact": false,
			  "returned": "default",
              "required": false
            },
            {
              "name": "members",
              "mutability": "readWrite",
              "type": "complex",
              "multiValued": true,
			  "returned": "default",
              "required": false,
              "subAttributes": [
                {
                  "uniqueness": "none",
                  "name": "value",
                  "description": "本组的成员标识符。",
				  "可变性": "不可变",
                  "类型": "字符串",
                  "多值": false,
                  "大小写敏感": false,
                  "返回值": "默认",
                  "必填": false
                },
                {
				  "uniqueness": "none",
                  "name": "$ref",
                  "description": "该组成员的位置。",
                  "mutability": "immutable",
                  "type": "string",
                  "multiValued": false,
				  "caseExact": false,
                  "returned": "default",
                  "required": false
                }
              ]
            }
          ],
          "id": "urn:ietf:params:scim:schemas:core:2.0:Group"
        },
        {
		  "meta": {
            "location": "Schemas/urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User",
			"resourceType": "Schema"
          },
          "name": "Domain",
          "description": "在 AD、LDAP 或 Entra ID 场景下用户的域。",
          "attributes": [
            {
			  "uniqueness": "none",
              "name": "userType",
              "canonicalValues": [
                "0",
                "1",
                "2",
                "3"
              ],
              "mutability": "immutable",
			  "type": "string",
              "multiValued": false,
              "caseExact": false,
              "returned": "default",
              "required": false
            },
            {
			  "唯一性": "无",
              "名称": "域",
              "可变性": "不可变",
              "类型": "字符串",
              "多值": false,
              "大小写精确": false,
              "返回值": "默认",
			  "required": false
            }
          ],
          "id": "urn:ietf:params:scim:schemas:extension:pam360_domain:2.0:User"
        }
      ]
    }

3.3 资源类型

3.3.1 获取资源类型

描述

用于获取在 PAM360 中实现的 SCIM 资源的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/ResourceTypes/{typeId}

HTTP 方法

GET

示例请求

	https://<PAM360 服务器的主机名或 IP 地址>:<端口>/scim/v2/ResourceTypes/Group

响应示例

	{
      "schema": "urn:ietf:params:scim:schemas:core:2.0:Group",
      "endpoint": "/Groups",
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:ResourceType"
      ],
	  "name": "Group",
      "description": "Group",
      "id": "Group"
    }

3.3.2 获取所有资源类型

描述

用于获取 PAM360 中已实现的所有 SCIM 资源的详细信息。

URL

	https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/ResourceTypes

HTTP 方法

GET

示例请求

	https://<PAM360 服务器的主机名或 IP 地址>:<端口号>/scim/v2/ResourceTypes

示例响应

	{
      "totalResults": 2,
      "startIndex": 1,
      "itemsPerPage": 100,
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:ListResponse"
      ],
	  "Resources": [
        {
          "schema": "urn:ietf:params:scim:schemas:core:2.0:User",
          "endpoint": "/Users",
		  "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:ResourceType"
          ],
          "name": "User",
          "description": "用户账户",
          "id": "User"
        },
        {
		  "schema": "urn:ietf:params:scim:schemas:core:2.0:Group",
          "endpoint": "/Groups",
          "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:ResourceType"
          ],
		  "name": "Group",
          "description": "Group",
          "id": "Group"
        }
      ]
    }
Top