Interface contract map
The API space is split by resource families and lifecycle mode: read, write, disable, reconcile, and error recovery all carry explicit expectations for identity providers and directory-backed clients.
Integration expectations
- Every integration must support tokenized auth and idempotent lifecycle semantics.
- Filters and paging should be bounded to avoid unplanned response amplification.
- Client behavior should capture both status and correlation headers for replay diagnostics.
Read first
SCIM protocol contract checks
Pagination
Default and max page size must be explicit and bounded.
Filtering
Grammar mismatch must return structured errors with deterministic remediation.
Mutations
Idempotent writes require stable client keys and correlation context.