https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's tech blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, distributed training, and data engineering. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Fri, 12 Jun 2026 00:00:00 GMT https://www.youngju.dev/blog/devops/2026-06-12-scim2-user-provisioning-deep-dive.en https://www.youngju.dev/blog/devops/2026-06-12-scim2-user-provisioning-deep-dive.en SSO alone cannot manage the account lifecycle. This post takes a practitioner-level deep dive into SCIM 2.0: the spec structure (RFC 7642/7643/7644), User/Group schemas, REST endpoints and PATCH semantics, support in Okta/Entra/Keycloak, and the traps you will hit when implementing a SCIM server. Fri, 12 Jun 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) scimiamprovisioningssosecuritydevops https://www.youngju.dev/blog/devops/2026-06-12-scim2-user-provisioning-deep-dive.ja https://www.youngju.dev/blog/devops/2026-06-12-scim2-user-provisioning-deep-dive.ja SSOだけではアカウントのライフサイクルを管理できません。SCIM 2.0の仕様構造(RFC 7642/7643/7644)、User/Groupスキーマ、RESTエンドポイントとPATCHのセマンティクス、Okta/Entra/Keycloakの対応状況、そしてSCIMサーバー実装時に陥りやすい罠まで、実務者の視点で深く掘り下げます。 Fri, 12 Jun 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) scimiamprovisioningssosecuritydevops https://www.youngju.dev/blog/devops/2026-06-12-scim2-user-provisioning-deep-dive https://www.youngju.dev/blog/devops/2026-06-12-scim2-user-provisioning-deep-dive SSO만으로는 계정 수명주기를 관리할 수 없습니다. SCIM 2.0의 스펙 구조(RFC 7642/7643/7644), User/Group 스키마, REST 엔드포인트와 PATCH 연산, Okta/Entra/Keycloak 지원 현황, 그리고 SCIM 서버 구현 시 빠지기 쉬운 함정까지 실무 관점에서 깊이 있게 정리합니다. Fri, 12 Jun 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) scimiamprovisioningssosecuritydevops