app.scim_identities
TableRow level security on
People the identity provider provisions through SCIM: their SCIM id, whether they are active, and the group names last sent. Written only by the SCIM endpoint.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.identity_providers on insert; never accepted from the caller and never changed.References app.organizations.id |
| identity_provider_id | uuid | No | Identity provider.References app.identity_providers.id |
| external_id | text | No | SCIM user id the identity provider assigned. |
| user_name | text | No | SCIM userName (the sign-in email), lowercase. |
| person_id | uuid | No | XOS person provisioned.References app.people.id |
| active | boolean | No | Whether the identity provider has the person active; inactive ends the membership. |
| groups | text[] | No | Group display names last provisioned (provider payload). |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |