UnboundID SCIM 2 SDK for Java

For client applications, the ScimService class is the primary entry point. It wraps a JAX-RS client and provides high-level methods for CRUD operations, partial updates (PATCH), and searching. You can interact with resources using strongly-typed POJOs (like UserResource) or via the GenericScimResource for flexible JSON manipulation.

import com.unboundid.scim2.client.ScimService;
import com.unboundid.scim2.common.exceptions.ScimException;
import com.unboundid.scim2.common.types.UserResource;
import com.unboundid.scim2.common.types.Name;
import com.unboundid.scim2.common.types.Email;
import com.unboundid.scim2.common.GenericScimResource;
import com.unboundid.scim2.common.messages.ListResponse;
import com.unboundid.scim2.common.filters.Filter;

// Create a ScimService.
Client client = ClientBuilder.newClient()
    .register(OAuth2ClientSupport.feature("..bearerToken.."));
WebTarget target = client.target("https://example.com/scim/v2");
ScimService scimService = new ScimService(target);

// Create a user with a POST request by calling create().
UserResource user = new UserResource()
    .setUserName("babs")
    .setPassword("secret");
user.setName(new Name()
    .setGivenName("Barbara")
    .setFamilyName("Jensen")
);
user.setEmails(new Email()
    .setType("home")
    .setPrimary(true)
    .setValue("babs@example.com")
);
user = scimService.create("Users", user);

// Retrieve the latest version of the user as a UserResource, and
// update/replace it with a PUT request.
user = scimService.retrieve("Users", user.getId(), UserResource.class);
user.setDisplayName("Babs");
user = scimService.replace(user);

// Retrieve the user as a GenericScimResource and update/replace it with a PUT
// request.
GenericScimResource genericUser =
    scimService.retrieve("Users", user.getId(), GenericScimResource.class);
genericUser.replace("displayName", "Babs Jensen");
genericUser = scimService.replaceRequest(genericUser).invoke();

// Perform a partial modification of the user with a PATCH request.
scimService.modifyRequest("Users", user.getId())
    .replaceValue("displayName", "Babs")
    .invoke(GenericScimResource.class);

// Perform a password change with a PATCH request.
scimService.modifyRequest("Users", user.getId())
    .replaceValue("password", "new-password")
    .invoke(GenericScimResource.class);

// Search for users with the same last name as our user. Fetch the first page
// of results, which should have a maximum of five resources on the page.
// The service should only return the value of the "name" attribute.
ListResponse<UserResource> searchResponse =
    scimService.searchRequest("Users")
        .filter(Filter.eq("name.familyName", user.getName().getFamilyName()))
        .page(1, 5)
        .attributes("name")
        .invoke(UserResource.class);