Skip to content
Last updated

HPE GreenLake SCIM User and Group Management

The HPE GreenLake SCIM User and Group Management API provides standardized user and group management operations compliant with SCIM (System for Cross-domain Identity Management) 2.0 specifications. This API enables you to automate identity lifecycle management, synchronize user data across systems, and maintain group memberships throughout your HPE GreenLake cloud environment.

System for Cross-domain Identity Management (SCIM) is an open standard that enables the secure automation of user and group data between a company's cloud applications and a service provider. You can create an external SCIM integration to synchronize users and groups between your identity provider and an organization in HPE GreenLake cloud.

SCIM integrations are supported only by Organization Governance organizations.

When you configure a SCIM integration for your organization, users and user groups are created and managed in the organization by your IdP. On the platform, workspace administrators manage role assignments for integration users and user groups but cannot do any of the following:

  • Create, update, and delete users for the domain associated with the integration
  • Add or remove user groups or change the membership of user groups created through the integration

Once users or user groups are added to the organization through an integration, the workspace administrator assigns roles to these users and user groups in specific workspaces.

Organization administrators can add or remove integration-managed users from user groups that were created outside of the integration.

Features

  • Create, read, update, and delete user accounts with SCIM 2.0 compliance
  • Manage user groups and group memberships
  • List users assigned to specific groups and groups assigned to users
  • HPE GreenLake-specific extensions for enhanced user and group metadata
  • Support for POSIX user extensions

Use cases

  • Identity provisioning automation—Create and configure user accounts when new employees join, ensuring consistent access across all HPE GreenLake services
  • Group-based access management—Organize users into groups based on roles, departments, projects, and so on to streamline permission management and maintain security boundaries
  • Directory synchronization—Synchronize user and group information between external identity providers and HPE GreenLake

What's new

Date: 2025-08-18

Initial public release of the HPE GreenLake SCIM User and Group Management API.

View the changelog for more information