architect-auth-scim

What problem does it solve?

Organizations need a repeatable, secure way to manage client-side SDK authentication keys and to automate dashboard user onboarding/offboarding; manual dashboard workflows are error-prone, slow, and create audit gaps. This Skill centralizes the procedures and reference details required to rotate SDK keys safely, inspect active keys, and provision or modify dashboard users via SCIM APIs.

Core Features & Use Cases

• Safe SDK key lifecycle: step-by-step pattern for creating a secondary key, promoting it to primary, and deleting the old key to enable zero-downtime rotation.
• SCIM provisioning automation: create, search, update (PUT full-permission replacement), and delete dashboard users programmatically with SCIM tokens and required headers.
• Permission hygiene & least privilege: guidance on granular vs legacy SCIM permission models and warnings about PUT semantics that can unintentionally remove permissions.
• Use case: Automate onboarding for a new engineering team by creating users, assigning workspace and team permissions, and rotating app SDK keys as part of CI-driven deployments.

Quick Start

Provision a dashboard user via SCIM and perform a safe SDK authentication key rotation for the target app using a valid SCIM token and the X-Request-Origin header.