Create a UI to generate a SCIM token in the Admin area
Proposal
In order to extend SCIM support for self managed users, we need to provide UI for SCIM token generation. This task contains the high level scope for that effort. @bdenkovych has proposed starting with the following changes in #12823 (comment 1083854586).
- Refactor
ScimOauthAccessToken
to allow token creation without a group. Treat such token as related to instance level. Make sure that only one such token can be created. - Add endpoint, similar to
/groups/\*group_id/-/scim_oauth
, to create/reset the token for instance level. - frontend: place the form, similar to the form in "SAML Single Sign On Settings", to create/reset the token for instance level on UI.
- Create feature toggle to roll out the UI, under the External authorization section.
The above can be subsequently turned into smaller issues or MRs as required.
Availability & Testing
Add feature tests to generate the SCIM token via the UI
Proposal
Copy same UI settings from SaaS to self managed Admin settings screen. Will place under External authorization
.
Edited by Daniel Mora