Back to marketplace catalog
Idira SCIM Server 2.0 - SH
By: Idira
Use case Development Tools
Category SaaS & business apps
Certification Certified
Version 1.26.7.2
Released Jul 8, 2026
Last updated Jul 21, 2026

Overview

The Idira Self-Hosted SCIM2.0 Server is fully aligned with the SCIM (System for Cross-domain Identity Management) standard, enhancing integration with external identity providers for streamlined management of privileged data. The SCIM server employs an internal REST API interface towards Vault, enabling identity providers such as SailPoint to query, modify, and manage privileged data from the Idira PAM SH. Supported privileged data includes Users, Groups, Accounts, Safes and Permissions and the Secrets Manager Credential Provider for retrieving account and login information. This integration is compatible with PAM Self-Hosted versions 12.2.10 and above. It will replace the existing PACLI-based SCIM integration.
Version 1.26.7.2
Current

Published Jul 8, 2026

  • - Implemented additional user query filter operators: co (contains), sw (starts with), ew (ends with) previously, it only supported eq

Previous versions

Version 1.26.2.9

Published Mar 5, 2026

  • - Updated scimServiceConfig.json to introduce the ReturnSecretLastModifiedTime property.
  • - Bug fixes
Version 1.25.10.8

Published Oct 9, 2025

  • - Updated the following endpoints do not require Authorization key in the header when the OAuth2 authentication is configured.
  • - /HealthCheck
  • - /scim/v2/ResourceTypes
  • - /scim/v2/Schemas
  • - /scim/v2/ServiceProviderConfig
  • - /Utility/QueryCyberArkVersion
  • - /Utility/QueryServerVersion
Version 1.25.9.22

Published Sep 29, 2025

Version 1.25.9

Published Sep 17, 2025

  • - Implemented additional container query filter operators: co (contains), sw (starts with), ew (ends with)
  • - Allows searching safes with the given partial keyword.
Version 1.25.8

Published Sep 2, 2025

  • - Updated Users API to return DN value in the LinkedObject property if the user is an external LDAP user.
  • - Updated Groups API to return DN value in the LinkedObject property if the group is an external LDAP group.
Version 1.7

Published May 11, 2025

  • -Improving usage and concurrent sessions, the following endpoints no longer requires authentication
  • - /scim/v2/ResourceTypes
  • - /scim/v2/Schemas
  • - /scim/v2/ServiceProviderConfig
Version 1.6

Published Apr 28, 2025

  • - Bug fixes and log enhancement
Version 1.5

Published Mar 18, 2025

Version 1.4

Published Mar 16, 2025

Version 1.3

Published Feb 18, 2025

Version 1.2

Published Jan 23, 2025

  • - Bug fix - All the SCIM API calls to logoff the CyberArk session in case the SCIM authentication is set to basic.
  • Now this is applied to the following endpoints: /Schemas /ResourceTypes /ServiceProviderConfig
Version 1.1

Published Jan 8, 2025

  • - Updated /HealthCheck endpoint to return "Healthy" if it could connect to the configured CyberArk.
  • - Changed Utility endpoint route from /scim/v2/Utility to /Utility .
  • - Updated /Utility/QueryCyberArkVersion endpoint. it no longer requires authentication.
Version 1

Published Nov 28, 2024

We also recommend

Credentials Management .NET8 SDK By: Idira

A development SDK designed for Idira core PAS products. This .NET 8 SDK enables fast and easy development of credential management plug-ins. Prerequisites for SH: * .NET 8 Runtime * CPM and PVWA v15.2 or later

Central Policy Manager (CPM)
Credentials Management .NET SDK - 64bit By: Idira

The credentials management SDK for .NET Framework 64-bit was designed for an easy and fast implementation of credentials management 64-bit plugins within Idira's core PAS products

Central Policy Manager (CPM)
CPM Webapp Plugin Development Kit By: Idira

Provide a starter template for developers building new Web Application CPM custom Plugins using the CPM WebApp Framework

Central Policy Manager (CPM)