# darrenjrobinson/entra-scim-mcp

Source: https://glimind.com/server/glama%2Fdarrenjrobinson%2Fentra-scim-mcp
Registry id: `glama/darrenjrobinson/entra-scim-mcp`
Status: unknown

## Tools (18)

- `add_group_members`: Add ≥1 users to a group — auto-chunks at 20 ids per PATCH. Idempotent.
- `create_group`: POST a group. Sets mailEnabled, securityEnabled, mailNickname, description via Entra extension.
- `delete_group`: DELETE a group. Unified groups recoverable for 30 days via Graph.
- `deprovision_user`: DELETE a user. Soft-deleted for 30 days, restorable only via Graph.
- `get_group`: Read a single group (members are NOT returned).
- `get_service_provider_config`: One-shot capability discovery. Static per API version — fetch once and reuse.
- `get_user`: Read a single user by id with optional attribute projection.
- `get_user_custom_security_attributes`: Read a user's CSAs, projected by attribute set. attributeSets is required.
- `list_groups`: List groups with the API's restricted filter set.
- `list_resource_types`: Enumerate SCIM resource types (User, Group).
- `list_schemas`: Enumerate SCIM schemas and Entra extensions, with each attribute's type, mutability and default-return.
- `list_users`: List users; supports restricted filter and cursor pagination up to 999 per page.
- `provision_user`: Create a user with required attribute set enforced.
- `remove_group_member`: Remove a single user from a group (API allows only one removal per PATCH).
- `update_group`: PATCH group attributes only (membership ops are rejected).
- `update_user`: PATCH a user; blocks remove of mailNickname and enforces work type on address paths.
- `update_user_custom_security_attributes`: PATCH CSAs on a user. remove or replace with empty array deletes an assignment.
- `update_user_lifecycle`: Set lifecycle attrs (e.g. employeeLeaveDateTime) which Lifecycle Workflows can fire off.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.