feat(scim): SCIM 2.0 directory provisioning with group-to-access projection - #7567

Merged

waleedlatif1 merged 40 commits into

feat/scim-provisioning

Sep 8, 2026

Commits on Sep 4, 2026

Commits on Sep 5, 2026

fix(auth): harden OAuth provider and API DX
waleedlatif1
committed
38e2516
Merge remote-tracking branch 'origin/staging' into codex/review-pr-7488
waleedlatif1
committed
357a1ac
fix(ui): refine OAuth consent and app revocation DX
waleedlatif1
committed
2c4bf1c
fix(helm): bump chart for OAuth cleanup job
waleedlatif1
committed
4750e5a
fix(api): preserve concise table predicate guidance
waleedlatif1
committed
eda5e21
docs(api): regenerate table predicate specification
waleedlatif1
committed
11a93f1
fix(api): retain predicate DX across clients
waleedlatif1
committed
e9ed221

Commits on Sep 7, 2026

feat(scim): SCIM 2.0 directory provisioning with group-to-access projection

waleedlatif1
and
claude
committed
93fd43b
fix(scim): audit fixes, admin settings UI, and reversible deactivation

waleedlatif1
and
claude
committed
1592ef1
fix(scim): second audit round — bugs, abstractions, tests

waleedlatif1
and
claude
committed
41ab8b1
fix(scim): address the first review round and CI

waleedlatif1
and
claude
committed
304b4e9
test(audit): mirror the SCIM actions and resource types into the shared audit mock

waleedlatif1
and
claude
committed
16fc76e
fix(scim): submit only the changed setting; move settings option lists to a constants module

waleedlatif1
and
claude
committed
aa695d1
fix(scim): address cubic's second review round

waleedlatif1
and
claude
committed
61a1cad
fix(scim): serialize first-time configuration; reconcile members when a rename drops an automatic mapping

waleedlatif1
and
claude
committed
d6b077b
Merge staging into feat/oauth-provider
waleedlatif1
committed
ee52702
fix(scim): mapping provenance column, drop the unused SSO binding, and close the third review round

waleedlatif1
and
claude
committed
b2aea87
docs(auth): sync migration references after staging merge
waleedlatif1
committed
8441f5e
refactor(scim): one removal invariant, honest provenance, finished primitive extraction, tests

waleedlatif1
and
claude
committed
670b288
fix(auth): complete OAuth integration and lifecycle guarantees
waleedlatif1
committed
0bdc120
Merge remote-tracking branch 'origin/staging' into codex/audit-pr-7488
waleedlatif1
committed
8a7ab21
test(cli): isolate OAuth process fixtures from credential overrides
waleedlatif1
committed
c253788
refactor(scim): move the provisioning library under ee

waleedlatif1
and
claude
committed
c10ea0b
fix(auth): bound cleanup runtime and finish consent polish
waleedlatif1
committed
adc82a3
Merge remote-tracking branch 'origin/staging' into codex/audit-pr-7488
waleedlatif1
committed
7f68209
fix(auth): unify CLI completion screens and simplify consent
waleedlatif1
committed
f2fbd76
fix(scim): certification pass — removal side effects, hourly sweep, dead surface, docs

waleedlatif1
and
claude
committed
12e9b86

Commits on Sep 8, 2026

refactor(scim): keep the server code at ee/scim/lib, matching the other enterprise features

waleedlatif1
and
claude
committed
fa214ea
feat(auth): control OAuth rollout through AppConfig
waleedlatif1
committed
6116e19
Merge remote-tracking branch 'origin/staging' into codex/audit-pr-7488
waleedlatif1
committed
751550d
merge: feat/oauth-provider into feat/scim-provisioning

waleedlatif1
and
claude
committed
d4aaf58
Merge remote-tracking branch 'origin/feat/oauth-provider' into feat/scim-provisioning
waleedlatif1
committed
c981fbe
merge: staging (with #7488 squashed) into feat/scim-provisioning

waleedlatif1
and
claude
committed
26817ff
fix(scim): certification audit round

waleedlatif1
and
claude
committed
dede150
test(scim): cover provisioning, the reconcile job, and group membership; say "token"

waleedlatif1
and
claude
committed
3c6ff6f