hey folks, short questions: 1: When integrating with an external IdP (as in: initially filling the model with data from the IDP and keeping it in sync over time), what approach are you using? 2: And as a follow-up: Is there something like a SCIM bridge in the spicedb ecosystem somewhere? Idea is to (at least initially) use SCIMv2 for this purpose (keeping users in entra and inside the spicedb model in sync).

what part of the identities do you want to pull over?

yeh, correct. the idea was to get userid/org and maybe a few other attributes over, and then hold them in sync with entra as leading system. Ok then, thanks for the info. I might look into such a bridge when I have the time (haha, so july earliest), shouldn't be that hard, as the scim spec is pretty well defined. but we'll see 🙂

sounds good! feel free to ask questions here if/when you run into things

Hi, pretty guys. Am new here and I saw messages all. This seems like a very reasonable request. Most companies already use Entra or another IdP, so having a SCIM bridge into SpiceDB would make adoption much easier. The SpiceDB team clearly recognizes the need, but it doesn't seem to be on the immediate roadmap. Building a basic bridge sounds straightforward, although making it production-ready is where the real work begins. I'm curious—if you were implementing this today, would you use SCIM as the primary sync mechanism, or would you prefer an event-driven approach using webhooks and message queues?