SurfNET would like SCIM integration with Grouper. Initially they might only need a few services or messages, but eventually they would like a full SCIM implementation (for Grouper related things like groups).
There are several open source Java SCIM implementations:
- OpenSCIM: looks like what we need, has not been updated since 2011, no getting started guide, one developer listed. Can't use it, GPLv3 is not compatible with our Apache2 License.
- UnBoundID: commerical company, but links dont work which is worrisome (link1, link2, link3)
- (KeithH 17 July 2013) The UnboundId SCIM SDK under Featured Downloads on this page works: https://www.unboundid.com/resources/scim/ I've started to play with it.
- scimproxy: looks like what we need, has been under active development, 3 developers listed, some documentation
- (KeithH 24 July 2013) Patrick Radtke from Stanford U is experimenting with this implementation and will be reporting on it via the CIFER Provisioning and Integration team.
- wso2 charon: under active development, used in wso2 identity service. For some reason the developer did not use an existing solution, or based this off of an existing solution. Has some documentation
- Ox: The Ox project by GLUU, specifically the Ox Trust module is actively developed and has client library with group support already implemented
- (KeithH 24 July 2013) Steve Carmody and I have the Gluu Ox Identity Appliance running on a couple hosts at Brown U. We're mainly using this for UMA/OAuth2 proofs of concept, but the SCIM bits are there, too.
We should investigate scimproxy and wso2 charon. Chris emailed the developers of scimproxy a while ago and didn't hear back. Chris just emailed the wso2 developer/blogger to get more information.