Relay api.<host>/scim/v2/** to SecurityService (ID3.4)

Shipped

November 15, 2026 at 7:07 AM UTC

Author

Kamo

Commit

711dfd5

forwardScim → securityservice /scim/v2 (forward() keeps Authorization: the bearer token is the whole auth). The path is exempt from tenant access rules like IoT vendor deliveries: a provider's provisioning cloud is not a member, and on the platform api.* host the platform org's rules would judge another org's provisioning. Harmless before SecurityService answers the path (404 from upstream).