diff --git a/docs/admin/users/oidc-auth/index.md b/docs/admin/users/oidc-auth/index.md index ae225d66ca..56adb915c6 100644 --- a/docs/admin/users/oidc-auth/index.md +++ b/docs/admin/users/oidc-auth/index.md @@ -136,9 +136,20 @@ CODER_DISABLE_PASSWORD_AUTH=true ## SCIM -> [!NOTE] -> SCIM is a Premium feature. -> [Learn more](https://coder.com/pricing#compare-plans). +> [!IMPORTANT] +> SCIM is a Premium feature +> ([learn more](https://coder.com/pricing#compare-plans)). +> +> Coder's SCIM 2.0 implementation is not a fully certified or guaranteed +> implementation of the [SCIM 2.0 specification](https://datatracker.ietf.org/doc/html/rfc7644). +> It is intended to cover common user provisioning and deprovisioning flows +> with the major identity providers (Okta, Microsoft Entra ID, etc.). Specific +> attributes, endpoints, or behaviors required by your IdP may not be +> supported, and compatibility may change between releases. If you depend on +> a specific SCIM behavior, [contact us](https://coder.com/contact) before +> rolling it out broadly. See +> [coder/coder#15830](https://github.com/coder/coder/issues/15830) for +> tracked gaps and ongoing work. Coder supports user provisioning and deprovisioning via SCIM 2.0 with header authentication. Upon deactivation, users are