manage-identity

Manage Webex identity operations including SCIM sync, domain verification, and directory cleanup.

3|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/achobgood/wxops --skill manage-identity-achobgood
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: manage-identity
Source: https://github.com/achobgood/wxops/tree/main/.claude/skills/manage-identity
Command: npx skills add https://github.com/achobgood/wxops --skill manage-identity-achobgood

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Managing Webex identity and directory operations requires navigating SCIM APIs, domain verification via DNS, org settings, and bulk jobs, where mistakes like using PUT instead of PATCH can silently delete user data. ## Core Features & Use Cases - SCIM User and Group Management: Search, create, update (PATCH), bulk import, and deactivate users and groups with safe partial-update patterns. - Domain Verification and Org Settings: Verify and claim domains via DNS TXT records, configure MFA, password policy, org rename, and feature settings by key. - Directory Operations: Import org contacts in bulk, resend activation emails, look up archived (deleted) users, and list space classification labels. - Use Case: An admin needs to sync 50 users from Okta into Webex. The skill verifies the domain is claimed, confirms identity scopes, builds a SCIM bulk import plan, executes it after approval, and verifies per-operation status codes. ## Quick Start Ask the assistant to sync users from your identity provider into Webex, verify a domain, or clean up stale directory accounts using the manage-identity skill.

Frequently Asked Questions about manage-identity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sync users from Okta or Azure AD to Webex?

Use SCIM bulk import via the scim-bulk and scim-users CLI groups after verifying and claiming your domain in Control Hub. The token needs the identity:people_rw scope, and each user is created with a POST operation inside a BulkRequest body.

What is the difference between SCIM PUT and PATCH for user updates?

PUT replaces the entire user resource, deleting any field not included in the body, while PATCH modifies only specified fields. Always use PATCH (scim-users update-users) for targeted changes like display name or active status.

How do I verify a domain in Webex before SCIM provisioning?

Run wxcli domains get-domain-verification to get a DNS TXT token, add it as a TXT record at your domain root, wait for propagation, then run verify-domain with the claim option. SCIM user creation fails for unverified domains.

Why do SCIM commands fail with 403 errors in Webex?

SCIM endpoints require identity:people_rw or identity:people_read scopes, not the spark-admin:people_* scopes used by Calling APIs. Also confirm the token is valid with wxcli whoami, since personal access tokens expire after 12 hours.

Can I resend activation emails to only some Webex users?

No. The activation-email create command takes no arguments and resends invites to all pending users org-wide as an async job. You poll the job ID for status and check per-user failures afterward.

When should I not use this identity management skill?

Do not use it for Webex Calling user provisioning or license assignment; those belong to the provision-calling and manage-licensing skills. SCIM user creation does not assign calling licenses, which is a separate workflow.