ScimTokensApi
extends ManagementSupport
in package
Bearer tokens for the SCIM 2.0 provisioning endpoint.
The scim_tokens namespace handle (CONTRACT.md §27.2), reached as
$client->management()->scimTokens(). Every method here goes through the one shared ManagementTransport, so §3 CSRF, the §4 cookie jar, the §5 tenant header, §6 TLS, §16 retry
and §19 telemetry apply without this class doing anything to opt in (§27.8).
Table of Contents
Methods
- __construct() : mixed
- create() : CreateScimTokenResponse
- `POST /api/v1/scim-tokens`
- forTenant() : static
- A COPY of this handle scoped to `$tenantId` (§27.4 rule 3). See {@see self::inOrg()} for why it copies.
- inOrg() : static
- A COPY of this handle scoped to `$orgId` (§27.4 rule 3).
- listItems() : array<int, ScimTokenResponse>
- `GET /api/v1/scim-tokens`
- revoke() : void
- `DELETE /api/v1/scim-tokens/{id}`
Methods
__construct()
public
__construct(ManagementTransport $transport[, NamespaceScope $scope = new NamespaceScope() ][, string|null $clientOrgId = null ][, string|null $clientTenantId = null ]) : mixed
Parameters
- $transport : ManagementTransport
-
The one wire path (§27.8).
- $scope : NamespaceScope = new NamespaceScope()
-
Per-handle
{org_id}/{tenant_id}overrides. - $clientOrgId : string|null = null
-
The client's own organization id, or
null. - $clientTenantId : string|null = null
-
The client's own tenant id, or
null.
create()
`POST /api/v1/scim-tokens`
public
create(CreateScimTokenRequest $body) : CreateScimTokenResponse
POST /api/v1/scim-tokens.
The response carries a ONE-TIME secret (provisioning_token): the server will not
return it again, so a caller that does not persist it here cannot recover it (§27.5).
Parameters
- $body : CreateScimTokenRequest
-
the request body
Return values
CreateScimTokenResponseforTenant()
A COPY of this handle scoped to `$tenantId` (§27.4 rule 3). See {@see self::inOrg()} for why it copies.
public
forTenant(string $tenantId) : static
Parameters
- $tenantId : string
Return values
staticinOrg()
A COPY of this handle scoped to `$orgId` (§27.4 rule 3).
public
inOrg(string $orgId) : static
Returns a new handle rather than mutating this one. An administrator holding a handle to their own organization should not find it repointed at someone else's because an unrelated code path re-scoped a shared object — and on a management surface that failure mode writes to the wrong tenant rather than merely reading from it.
Parameters
- $orgId : string
Return values
staticlistItems()
`GET /api/v1/scim-tokens`
public
listItems() : array<int, ScimTokenResponse>
GET /api/v1/scim-tokens.
Returns the server's complete list. This endpoint is NOT paginated, so the result is a
plain list and never a Page (§27.4 rule 4).
Return values
array<int, ScimTokenResponse>revoke()
`DELETE /api/v1/scim-tokens/{id}`
public
revoke(string $id) : void
DELETE /api/v1/scim-tokens/{id}.
Returns nothing; the server answers with an empty body.
NOT idempotent (§27.4 rule 6): deleting something already deleted raises NotFoundError rather than succeeding quietly.
Parameters
- $id : string
-
the
{id}path parameter