CIM을 사용한 IdP - Salesforce 프로비저닝 방법 참고

준비

가정 시퀀스

각 처리

① 토큰 엔드포인트에서 액세스 토큰 획득

GET /services/oauth2/token HTTP/1.1
Host: login.salesforce.com
Content-Type: application/x-www-form-urlencoded; charset=utf-8

grant_type=password&client_id=YOUR_CLINET_ID&client_secret=YOUR_CLIENT_SECRET&&username=YOUR_USERNAME&password=YOUR_PASSWORD

{
    "id":"https://login.salesforce.com/id/00Dx0000000BV7z/005x00000012Q9P",
    "issued_at":"1278448832702",
    "instance_url":"https://na1.salesforce.com",
    "signature":"0CmxinZir53Yex7nE0TD+zMpvIWYGb/bdJh6XfOH6EQ=",
    "access_token":"00Dx0000000BV7z!AR8AQAxo9UfVkh8AlV0Gomt9Czx9LjHnSSpwBMmbRcgKFmxOtvxjTrKW19ye6PE3Ds1eQz3z8jr3W7_VbWmEu4Q8TVGSTHxs"
}

② 갱신 대상 사용자 ID 취득

GET /services/scim/v2/Users?filters=userName ... HTTP/1.1
Host: sales_force_org_url
Content-Type: application/json; charset=utf-8
Authorization: Bearer {access_token}

{
    "schemas": ["urn:ietf:params:scim:api:messages:2.0:ListResponse"],
    "totalResults": 1,
    "Resources": [{
        "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
        "id": "user_id",
        "userName": "...",
        ...
        }]
    }],
    "startIndex": 1,
    "itemsPerPage": 20
}

③ 사용자 속성 업데이트

PATCH /services/scim/v2/Users/{user_id} HTTP/1.1
Host: sales_force_org_url
Content-Type: application/json; charset=utf-8
Authorization: Bearer {access_token}

{
    "schemas": ["urn:ietf:params:scim:api:messages:2.0:PatchOp"],
    "emails": [{
        "value": "[email protected]",
        ...
    }]
}

{
    "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
    "id": "5171a35d82074e068ce2",
    ...
    "emails": [{
        "value": "[email protected]",
        ...
    }]
}

참고 정보