Namespace Oci.IdentitydomainsService.Models

Classes

AccountMgmtInfoApp

Application on which the account is based
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

AccountMgmtInfoObjectClass

Object-class of the Account
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

AccountMgmtInfoOwner

Owning user of the account
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

AccountMgmtInfoResourceType

Resource Type of the Account
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

Clients MAY execute queries without passing parameters on the URL by using the HTTP POST verb combined with the .search path extension. The inclusion of .search on the end of a valid SCIM endpoint SHALL be used to indicate the HTTP POST verb is intended to be a query operation. To create a new query result set, a SCIM client sends an HTTP POST request to the desired SCIM resource endpoint (ending in .search). The body of the POST request MAY include any of the parameters.

AccountMgmtInfoUserWalletArtifact

The UserWalletArtifact that contains the credentials that the system will use when performing Secure Form-Fill to log the user in to this application
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AccountMgmtInfos

The SCIM protocol defines a standard set of query parameters that can be used to filter, sort, and paginate to return zero or more resources in a query response. Queries MAY be made against a single resource or a resource type endpoint (e.g., /Users), or the service provider Base URI.

AccountRecoverySetting

Account Recovery Settings

AccountRecoverySettings

Addresses

A physical mailing address for this User, as described in (address Element). Canonical Type Values of work, home, and other. The value attribute is a complex type with the following sub-attributes.

ApiKey

The user's API key.

ApiKeySearchRequest

ApiKeyUser

The user linked to the API key.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

ApiKeys

App

Schema for App resource.

AppAccounts

Accounts of App

AppAdminRoles

A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers administrative privilege within this App.

AppAliasApps

Each value of this internal attribute refers to an Oracle Public Cloud infrastructure App on which this App depends.

AppAllowAuthzPolicy

Allow Authz Policy.
Added In: 19.2.1
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppAllowedScopes

A list of scopes (exposed by this App or by other Apps) that this App is allowed to access when it acts as an OAuthClient.

AppAllowedTags

A list of tags, acting as an OAuthClient, this App is allowed to access.

AppAppResources

A list of AppResources of this App.
Added In: 19.2.1
SCIM++ Properties:

caseExact: true
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex

AppAppSignonPolicy

App Sign-on Policy.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppAppsNetworkPerimeters

Network Perimeter

AppAsOPCService

OPCService facet of the application.
Deprecated Since: 17.3.4
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppAttrRenderingMetadata

Label for the attribute to be shown in the UI.

AppBasedOnTemplate

Application template on which the application is based.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex

AppBundleConfigurationProperties

ConnectorBundle configuration properties
SCIM++ Properties:

idcsCompositeKey: [name]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppBundlePoolConfiguration

Configurable options maintaining a pool of ICF connector instances. Values for sub attributes can be set only if the ConnectorBundle referenced in the App has connectorPoolingSupported set to true
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppCertificates

Each value of this attribute represent a certificate that this App uses when it acts as an OAuthClient.

AppCloudControlProperties

A collection of arbitrary properties that scope the privileges of a cloud-control App.

AppConnectorBundle

ConnectorBundle
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

AppDenyAuthzPolicy

Deny Authz Policy.
Added In: 19.2.1
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppDomainApp

Description:
Added In: 18.2.2
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppEditableAttributes

App attributes editable by subject

AppExtensionDbcsApp

This extension provides attributes for database service facet of an App

AppExtensionEnterpriseAppApp

This extension defines the Enterprise App related attributes.

AppExtensionFormFillAppApp

This extension provides attributes for Form-Fill facet of App

AppExtensionFormFillAppTemplateAppTemplate

This extension provides attributes for Form-Fill facet of AppTemplate

AppExtensionKerberosRealmApp

Kerberos Realm

AppExtensionManagedappApp

Managed App

AppExtensionMulticloudServiceAppApp

This extension defines attributes specific to Apps that represent instances of Multicloud Service App

AppExtensionOpcServiceApp

This extension defines attributes specific to Apps that represent instances of an Oracle Public Cloud (OPC) service.

AppExtensionRadiusAppApp

This extension defines attributes specific to Apps that represent instances of Radius App.

AppExtensionRequestableApp

Requestable App

AppExtensionSamlServiceProviderApp

This extension defines attributes related to the Service Providers configuration.

AppExtensionWebTierPolicyApp

WebTier Policy

AppFlatFileBundleConfigurationProperties

Flat file connector bundle configuration properties
SCIM++ Properties:

idcsCompositeKey: [name]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppFlatFileConnectorBundle

Flat file connector bundle to sync from a flat file.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppFormFillUrlMatch

A list of application-formURLs that FormFill should match against any formUrl that the user-specifies when signing in to the target service. Each item in the list also indicates how FormFill should interpret that formUrl.
SCIM++ Properties:

idcsCompositeKey: [formUrl]
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppGrantedAppRoles

A list of AppRoles that are granted to this App (and that are defined by other Apps). Within the Oracle Public Cloud infrastructure, this allows AppID-based association. Such an association allows this App to act as a consumer and thus to access resources of another App that acts as a producer.

AppGrants

Grants assigned to the app

AppGroupAssertionAttributes

Each value of this attribute describes an attribute of Group that will be sent in a Security Assertion Markup Language (SAML) assertion.
Deprecated Since: 18.2.2
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [name]
idcsSearchable: false
idcsValuePersistedInOtherAttribute: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppGroupMembershipToReturn

In a successful authentication response, Oracle Identity Cloud Service will pass user's group information restricted to groups persisted in this attribute, in the specified RADIUS attribute.
Added In: 20.1.3
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

AppIdentityBridges

IdentityBridges associated with this App
Added In: 19.1.4
SCIM++ Properties:

idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

AppIdentityProviders

A list of IdentityProvider assigned to app. A user trying to access this app will be automatically redirected to configured IdP during the authentication phase, before being able to access App.

AppIdpPolicy

IDP Policy.
Added In: 18.1.2
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppObjectClasses

Object classes
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

AppOutboundAssertionAttributes

Use to construct the outgoing SAML attributes
Added In: 18.2.6
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

AppProtectableSecondaryAudiences

A list of secondary audiences--additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps.

AppRadiusPolicy

RADIUS Policy assigned to this application.
Added In: 2209070044
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppRole

AppRole resource.

AppRoleApp

A unique identifier for the application that references this role.
SCIM++ Properties:

idcsSearchable: true
idcsCsvAttributeNameMappings: [[columnHeaderName:App Name, mapsTo:app.display]]
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

AppRoleMembers

AppRole members - when requesting members attribute, it is recommended to use startIndex and count to return members in pages instead of in a single response, eg : #attributes=members[startIndex=1%26count=10]

AppRoleSearchRequest

AppRoles

AppSamlServiceProvider

An attribute that refers to the SAML Service Provider that runtime services will use to log an end user in to this App automatically. Note that this will be used only if the loginMechanism is 'SAML'.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppScopes

Scopes defined by this App. Used when this App acts as an OAuth Resource.

AppSearchRequest

AppServiceParams

Custom attribute that is required to compute other attribute values during app creation.

AppSignonPolicy

Sign-on Policy.
Deprecated Since: 17.3.4
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppStatusChanger

Schema for AppStatusChanger resource.

AppTermsOfUse

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppThreeLeggedOAuthCredential

The value of this attribute persists any OAuth access token that the system uses to connect to this ManagedApp. The system obtains this access token using an OAuth protocol flow that could be two-legged or three-legged. A two-legged flow involves only the requester and the server. A three-legged flow also requires the consent of a user -- in this case the consent of an administrator.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex

AppTrustPolicies

Trust Policies.

AppUserAssertionAttributes

Each value of this attribute describes an attribute of User that will be sent in a Security Assertion Markup Language (SAML) assertion.
Deprecated Since: 18.2.2
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [name]
idcsSearchable: false
idcsValuePersistedInOtherAttribute: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AppUserRoles

A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers end-user privilege within this App.

ApprovalWorkflow

Schema for ApprovalWorkflow

ApprovalWorkflowApprovalWorkflowSteps

ApprovalWorkflowSteps applicable for the ApprovalWorkflowInstance.

ApprovalWorkflowAssignment

Schema for ApprovalWorkflowAssignment

ApprovalWorkflowAssignmentApprovalWorkflow

Details of the Approval Workflow
SCIM++ Properties:

caseExact: true
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

ApprovalWorkflowAssignmentAssignedTo

Details of resource for which Approval Workflow is assigned
SCIM++ Properties:

caseExact: true
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

ApprovalWorkflowAssignments

ApprovalWorkflowMaxDuration

Max duration of the ApprovalWorkflow must be acted at all levels.
SCIM++ Properties:

caseExact: true
idcsSearchable: false
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

ApprovalWorkflowStep

Schema for ApprovalWorkflowStep

ApprovalWorkflowStepApprovers

Approvers of the ApprovalWorkflowStep.

ApprovalWorkflowSteps

ApprovalWorkflows

Apps

AuthToken

The user's Auth token resource.

AuthTokenSearchRequest

AuthTokenUser

The user linked to the Auth token.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

AuthTokens

AuthenticationFactorSetting

Multi Factor Authentication Settings for Tenant

AuthenticationFactorSettings

AuthenticationFactorSettingsBypassCodeSettings

Settings related to the bypass code, such as bypass code length, bypass code expiry, max active bypass codes, and so on
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsClientAppSettings

Settings related to compliance, Personal Identification Number (PIN) policy, and so on
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsCompliancePolicy

Compliance Policy that defines actions to be taken when a condition is violated

AuthenticationFactorSettingsDuoSecuritySettings

Settings related to Duo Security
Added In: 19.2.1
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsEmailSettings

Settings related to Email Factor, such as enabled email magic link factor, custom url for Email Link
Added In: 20.1.3
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsEndpointRestrictions

Settings that describe the set of restrictions that the system should apply to devices and trusted endpoints of a user
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsIdentityStoreSettings

Settings related to the use of a user's profile details from the identity store
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsNotificationSettings

Settings related to the Mobile App Notification channel, such as pull
Added In: 17.4.2
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsSearchRequest

AuthenticationFactorSettingsThirdPartyFactor

Settings related to third-party factor
Added In: 19.2.1
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

AuthenticationFactorSettingsTotpSettings

Settings related to Time-Based One-Time Passcodes (TOTP), such as hashing algo, totp time step, passcode length, and so on
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

AuthenticationFactorsRemover

This schema defines the attributes of Authentication Factors Remover call.

AuthenticationFactorsRemoverUser

User for whom the authentication factors need to be deleted
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

BrandingSetting

Brand Settings schema

BrandingSettings

BrandingSettingsCompanyNames

Name of the company in different locales

BrandingSettingsDefaultCompanyNames

Default name of the Company in different locales

BrandingSettingsDefaultImages

References to various images

BrandingSettingsDefaultLoginTexts

Default Login text in different locales

BrandingSettingsImages

References to various images

BrandingSettingsLoginTexts

CloudGate

Resource representing a Cloud Gate

CloudGateExtMappings

A list of Cloud Gate Mappings that map Apps to this Cloud Gate

CloudGateExtServers

A list of Server Blocks on this Cloud Gate

CloudGateExtUpstreamServerGroups

A list of upstream server groups

CloudGateExtUpstreamServers

A list of upstream servers

CloudGateMapping

Resource representing a Cloud Gate mapping

CloudGateMappingCloudGate

Reference to owning Cloud Gate
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

CloudGateMappingGatewayApp

Reference to gateway application protected by this Cloud Gate
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

CloudGateMappingSearchRequest

CloudGateMappingServer

Reference to server block for this mapping
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

CloudGateMappingUpstreamServerGroup

Reference to upstream block for this mapping
Added In: 20.1.3
SCIM++ Properties:

caseExact: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

CloudGateMappings

CloudGateOauthClient

A reference to the OAuth client App used by this Cloud Gate instance.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

CloudGateSearchRequest

CloudGateServer

Resource representing a Cloud Gate server block

CloudGateServerCloudGate

Reference to owning Cloud Gate
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

CloudGateServerSearchRequest

CloudGateServers

CloudGates

Condition

Condition resource. A unit that captures a condition.

ConditionExtensionOciconsolesignonpolicyconsentPolicy

This extension defines attributes used to record consent for modification of the "Security Policy for OCI Console" sign-on policy, Rule, Condition or ConditionGroup.

ConditionSearchRequest

Conditions

CustomerSecretKey

The user's customer secret key.

CustomerSecretKeySearchRequest

CustomerSecretKeyUser

User linked to customer secret key
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

CustomerSecretKeys

DefinedTags

OCI Defined Tags
Added In: 2011192329
SCIM++ Properties:

idcsCompositeKey: [namespace, key, value]
type: complex
idcsSearchable: true
required: false
mutability: readWrite
multiValued: true
returned: default

DynamicResourceGroup

Schema for DynamicResourceGroup resource.

DynamicResourceGroupDynamicGroupAppRoles

A list of appRoles that are currently granted to this Dynamic Resource Group. The Identity service will assert these AppRoles for any resource that satisfies the matching-rule of this DynamicResourceGroup.

DynamicResourceGroupGrants

Grants assigned to group

DynamicResourceGroupSearchRequest

DynamicResourceGroups

ExtensionAdaptiveUser

This extension defines attributes to manage user's risk score.

ExtensionCapabilitiesUser

User's Capabilities

ExtensionDbCredentialsUser

The database credentials user extension.

ExtensionDbUserUser

DB User extension

ExtensionDbcsGroup

Schema for Database Service Resource

ExtensionDynamicGroup

Dynamic Group

ExtensionEnterprise20User

Enterprise User

ExtensionFidoAuthenticationFactorSettings

This extension defines attributes used to manage Multi-Factor Authentication settings of fido authentication

ExtensionGroupGroup

Oracle Identity Cloud Service Group

ExtensionKerberosUserUser

Kerberos User extension

ExtensionMeUser

Oracle Identity Cloud Service self service schema extension

ExtensionMessagesError

Extension schema for error messages providing more details with the exception status. Returns messageId corresponding to the detailed error message and optionally additional data related to the error condition - for example reason for authentication failure such as user is disabled or locked.

ExtensionMfaUser

This extension defines attributes used to manage Multi-Factor Authentication within a service provider. The extension is typically applied to a User resource, but MAY be applied to other resources that use MFA.

ExtensionOCITags

OCI Tags.

ExtensionPasswordStateUser

This extension defines attributes used to manage account passwords within a Service Provider. The extension is typically applied to a User resource, but MAY be applied to other resources that use passwords.

ExtensionPasswordlessUser

This extension defines attributes used to manage Passwordless-Factor Authentication within a service provider. The extension is typically applied to a User resource, but MAY be applied to other resources that use MFA.

ExtensionPosixGroup

POSIX Group extension

ExtensionPosixUser

POSIX User extension

ExtensionRequestableGroup

Requestable Group

ExtensionSecurityQuestionsUser

This extension defines the attributes used to store the security questions of a user.

ExtensionSelfChangeUser

Controls whether a user can update themselves or not via User related APIs

ExtensionSelfRegistrationUser

This extension defines attributes used to manage self registration profile linked to the user.

ExtensionSffUser

SFF Auth Keys User extension

ExtensionSocialAccountUser

Social User extension

ExtensionSocialIdentityProvider

Social Identity Provider Extension Schema

ExtensionTermsOfUseUser

ExtensionThirdPartyAuthenticationFactorSettings

This extension defines attributes used to manage Multi-Factor Authentication settings of third party provider

ExtensionUserCredentialsUser

User's credentials

ExtensionUserStateUser

This extension defines the attributes used to manage account passwords within a service provider. The extension is typically applied to a User resource, but MAY be applied to other resources that use passwords.

ExtensionUserUser

Oracle Identity Cloud Service User

ExtensionX509IdentityProvider

X509 Identity Provider Extension Schema

FreeformTags

OCI Freeform Tags
Added In: 2011192329
SCIM++ Properties:

idcsCompositeKey: [key, value]
idcsSearchable: true
type: complex
required: false
mutability: readWrite
returned: default
multiValued: true

Grant

Schema for Grant Resource

GrantApp

Application that is being granted. Each Grant must grant either an App or an App-Entitlement-Collection.
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:App Name, defaultValue:jobParam:appDisplayName, mapsTo:app.value]]
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

GrantAppEntitlementCollection

Application-Entitlement-Collection that is being granted. Each Grant must grant either an App or an App-Entitlement-Collection.
Added In: 18.2.4
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

GrantEntitlement

The entitlement or privilege that is being granted
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:Entitlement Value, csvColumnForResolvingResourceType:Entitlement Name, mapsTo:entitlement.attributeValue, referencedResourceTypeUniqueAttributeNameMappings:[[mapsFromColumnName:Entitlement Value, resourceTypeAttributeName:displayName], [mapsFromColumnName:App Name, resourceTypeAttributeName:app.display]], resolveValueUsingResourceType:[[resolveBy:AppRole, valueToBeResolved:appRoles]]], [columnHeaderName:Entitlement Name, defaultValue:appRoles, mapsTo:entitlement.attributeName]]
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex

GrantGrantee

Grantee beneficiary. The grantee may be a User, Group, App or DynamicResourceGroup.
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:Grantee Name, csvColumnForResolvingResourceType:Grantee Type, mapsTo:grantee.value], [columnHeaderName:Grantee Type, mapsTo:grantee.type]]
idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

GrantGrantor

User conferring the grant to the beneficiary
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
idcsIgnoreReadOnlyAndImmutableRefAttrsDuringForceDelete: true
required: false
returned: default
type: complex

GrantSearchRequest

Grants

Group

The Group resource.

GroupExtAppRoles

A list of appRoles that the user belongs to, either thorough direct membership, nested groups, or dynamically calculated
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

GroupExtDomainLevelSchemaNames

DBCS Domain-level schema-names. Each value is specific to a DB Domain.
Added In: 18.2.4
SCIM++ Properties:

idcsCompositeKey: [domainName, schemaName]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex

GroupExtGrants

Grants assigned to group
SCIM++ Properties:

idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

GroupExtInstanceLevelSchemaNames

DBCS instance-level schema-names. Each schema-name is specific to a DB Instance.
Added In: 18.2.4
SCIM++ Properties:

idcsCompositeKey: [dbInstanceId, schemaName]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex

GroupExtOwners

Group owners
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value, type]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

GroupExtPasswordPolicy

Password Policy associated with this Group.
Added In: 20.1.3
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

GroupExtSyncedFromApp

The entity that created this Group.
Added In: 18.4.2
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

GroupMembers

The group members. Important: When requesting group members, a maximum of 10,000 members can be returned in a single request. If the response contains more than 10,000 members, the request will fail. Use 'startIndex' and 'count' to return members in pages instead of in a single response, for Example: #attributes=members[startIndex=1%26count=10]. This REST API is SCIM compliant.

GroupSearchRequest

Groups

IdcsCreatedBy

The User or App who created the Resource
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: true
returned: default
type: complex

IdcsLastModifiedBy

The User or App who modified the Resource
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex

IdentityPropagationTrust

Schema used for Identity Propagation Trust.

IdentityPropagationTrustImpersonationServiceUsers

The Impersonating Principal.

IdentityPropagationTrustKeytab

The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
SCIM++ Properties:

idcsCompositeKey: [secretOcid]
idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

IdentityPropagationTrusts

IdentityProvider

Federation trusted partner Identity Provider

IdentityProviderCorrelationPolicy

Correlation policy
Added In: 20.1.3
SCIM++ Properties:

caseExact: true
idcsSearchable: false
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

IdentityProviderJitProvAssignedGroups

Lists the groups each social JIT-provisioned user is a member. Just-in-Time user-provisioning applies this static list when jitProvGroupStaticListEnabled:true.
Added In: 2310202314
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: false
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

IdentityProviderJitUserProvAssignedGroups

Refers to every group of which a JIT-provisioned User should be a member. Just-in-Time user-provisioning applies this static list when jitUserProvGroupStaticListEnabled:true.

IdentityProviderJitUserProvAttributes

Assertion To User Mapping
Added In: 20.1.3
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

IdentityProviderJitUserProvGroupMappings

The list of mappings between the Identity Domain Group and the IDP group.

IdentityProviderRelayIdpParamMappings

Relay Param variable for Social IDP
Added In: 2305190132
SCIM++ Properties:

idcsCompositeKey: [relayParamKey]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

IdentityProviderSearchRequest

IdentityProviders

IdentitySetting

Identity Settings

IdentitySettings

IdentitySettingsMyProfile

Whether to allow users to update their own profile.
Added In: 2207040824
SCIM++ Properties:

caseExact: false
multiValued: false
required: false
type: complex
uniqueness: none

IdentitySettingsPOSIXGid

A list of Posix Gid settings.
Added In: 17.4.6
SCIM++ Properties:

caseExact: false
multiValued: false
required: false
type: complex
uniqueness: none

IdentitySettingsPOSIXUid

A list of Posix Uid settings.
Added In: 17.4.6
SCIM++ Properties:

caseExact: false
multiValued: false
required: false
type: complex
uniqueness: none

IdentitySettingsSearchRequest

IdentitySettingsTokens

A list of tokens and their expiry length.

KmsiSetting

Kmsi Settings schema

KmsiSettings

KmsiSettingsSearchRequest

Me

User Account

MeEmails

A complex attribute representing emails

MeEntitlements

A list of entitlements for the User that represent a thing the User has.

MeGroups

A list of groups that the user belongs to, either thorough direct membership, nested groups, or dynamically calculated

MeIms

User's instant messaging addresses

MeName

A complex attribute that contains attributes representing the name
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:Formatted Name, mapsTo:name.formatted], [columnHeaderName:Honorific Prefix, mapsTo:name.honorificPrefix], [columnHeaderName:First Name, mapsTo:name.givenName], [columnHeaderName:Middle Name, mapsTo:name.middleName], [columnHeaderName:Last Name, mapsTo:name.familyName], [columnHeaderName:Honorific Suffix, mapsTo:name.honorificSuffix]]
idcsPii: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

MePasswordChanger

The schema used for a user changing their own password.

MePhoneNumbers

Phone numbers

MePhotos

URLs of photos for the User

MeRoles

A list of roles for the User that collectively represent who the User is; e.g., 'Student', 'Faculty'.

MeX509Certificates

A list of certificates issued to the User.

MyApiKey

The user's API key.

MyApiKeyUser

The user linked to the API key.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MyApiKeys

MyApp

Schema for MyApp resource.

MyAppApp

Application on which the account is based
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: true
returned: default
type: complex
uniqueness: none

MyAppOwner

Owning user of the account
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

MyAppSearchRequest

MyAppUserWalletArtifact

The UserWalletArtifact that contains the credentials that the system will use in performing Secure Form-Fill to log the User into this application.
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

MyApps

MyAuthToken

The user's Auth token resource.

MyAuthTokenUser

The user linked to the Auth token.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MyAuthTokens

MyAuthenticationFactorInitiator

This schema defines the attributes of Initiator call.

MyAuthenticationFactorInitiatorAdditionalAttributes

Additional attributes which will be sent as part of a push notification

MyAuthenticationFactorInitiatorThirdPartyFactor

User's third-party authentication factor details
SCIM++ Properties:

caseExact: false
idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

MyAuthenticationFactorValidator

Validate any given Authentication Factor

MyAuthenticationFactorValidatorAdditionalAttributes

Additional attributes which will be sent as part of a push notification

MyAuthenticationFactorValidatorSecurityQuestions

List of security questions the user has submitted to get authenticated.

MyAuthenticationFactorValidatorThirdPartyFactor

User's third-party authentication factor details
SCIM++ Properties:

caseExact: false
idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

MyAuthenticationFactorsRemover

This schema defines the attributes of Authentication Factors Remover call.

MyAuthenticationFactorsRemoverUser

User for whom the authentication factors need to be deleted
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

MyCompletedApproval

Schema for MyPendingApproval and MyCompletedApproval

MyCompletedApprovals

MyCustomerSecretKey

The user's customer secret key.

MyCustomerSecretKeyUser

User linked to customer secret key
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MyCustomerSecretKeys

MyDevice

Device Resource.

MyDeviceAdditionalAttributes

Device additional attributes

MyDeviceAuthenticationFactors

Authentication Factors

MyDeviceNonCompliances

Device Non Compliances

MyDevicePushNotificationTarget

Push Notification target. Reference to Device notification related resource
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

MyDeviceThirdPartyFactor

User's third-party authentication factor details
Added In: 19.2.1
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MyDeviceUser

Device member
Deprecated Since: 17.3.4
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

MyDevices

MyGroup

The Group resource.

MyGroupMembers

MyGroupSearchRequest

MyGroups

MyOAuth2ClientCredential

The user's OAuth2 client credentials.

MyOAuth2ClientCredentialScopes

Scopes

MyOAuth2ClientCredentialUser

The user linked to the OAuth2 client credential.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MyOAuth2ClientCredentials

MyPendingApproval

Schema for MyPendingApproval and MyCompletedApproval

MyPendingApprovals

MyRequest

Request resource

MyRequestApprovalDetails

Approvals created for this request.

MyRequestRequesting

Requestable resource reference.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

MyRequestRequestor

Requesting User
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: request
type: complex
uniqueness: none

MyRequestSearchRequest

MyRequestableGroup

The Group resource.

MyRequestableGroupMembers

MyRequestableGroupSearchRequest

MyRequestableGroups

MyRequests

MySmtpCredential

User's smtp credential

MySmtpCredentialUser

User linked to smtp credential
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MySmtpCredentials

MySupportAccount

Support Provider Account

MySupportAccountUser

User linked to Support Account
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

MySupportAccounts

MyTrustedUserAgent

This schema defines the attributes of Trusted User Agents owned by users. Multi-Factor Authentication uses Trusted User Agents to authenticate users. A User Agent is software application that a user uses to issue requests.\r For example, a User Agent could be a particular browser (possibly one of several executing on a desktop or laptop) or a particular mobile application (again, one of several executing on a particular mobile device). \r A User Agent is trusted once the Multi-Factor Authentication has verified it in some way.

MyTrustedUserAgentTrustedFactors

Trusted 2FA Factors

MyTrustedUserAgentUser

user for whom the trust-token was issued
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: default
type: complex
uniqueness: none

MyTrustedUserAgents

MyUserDbCredential

User's Database Credential

MyUserDbCredentials

MyUserDbCredentialsUser

The user linked to the database credential.
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

NetworkPerimeter

NetworkPerimeter resource. A unit that captures a NetworkPerimeter as a collection of IP Addresses.

NetworkPerimeterIpAddresses

IPAddresses or Ranges assigned to the NetworkPerimeter

NetworkPerimeterSearchRequest

NetworkPerimeters

NotificationSetting

Notification resource.

NotificationSettings

NotificationSettingsEventSettings

Event settings

NotificationSettingsFromEmailAddress

From email address to be used in the notification emails
SCIM++ Properties:

caseExact: false
multiValued: false
mutability: readWrite
required: true
returned: always
type: complex
uniqueness: none

NotificationSettingsSearchRequest

OAuth2ClientCredential

The user's OAuth2 client credentials.

OAuth2ClientCredentialScopes

Scopes

OAuth2ClientCredentialSearchRequest

OAuth2ClientCredentialUser

The user linked to the OAuth2 client credential.
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

OAuth2ClientCredentials

OAuthClientCertificate

OAuth Client Certificate schema

OAuthClientCertificateSearchRequest

OAuthClientCertificates

OAuthPartnerCertificate

OAuth Partner Certificate schema

OAuthPartnerCertificateSearchRequest

OAuthPartnerCertificates

OciConsoleSignOnPolicyConsent

The "Security Policy for OCI Console" sign-on policy consent resource used to record consents. The schema to record the "Security Policy for OCI Console" sign-on policy consent.

OciConsoleSignOnPolicyConsentConsentSignedBy

User or App that signs the consent.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

OciConsoleSignOnPolicyConsentModifiedResource

The modified Policy, Rule, ConditionGroup or Condition during consent signing.
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

OciConsoleSignOnPolicyConsentPolicyResource

Policy Resource
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

OciConsoleSignOnPolicyConsentSearchRequest

OciConsoleSignOnPolicyConsents

Operations

Each patch operation object MUST have exactly one "op" member, whose value indicates the operation to perform and MAY be one of "add", "remove", or "replace". See Section 3.5.2 for details.

PasswordPolicies

PasswordPolicy

PasswordPolicy resource.

PasswordPolicyConfiguredPasswordPolicyRules

List of password policy rules that have values set. This map of stringKey:stringValue pairs can be used to aid users while setting/resetting password

PasswordPolicyGroups

A list of groups that the password policy belongs to.

PasswordPolicySearchRequest

PatchOp

See Section 3.5.2. HTTP PATCH is an OPTIONAL server function that enables clients to update one or more attributes of a SCIM resource using a sequence of operations to "add", "remove", or "replace" values. Clients may discover service provider support for PATCH by querying the service provider configuration. The general form of the SCIM patch request is based on JavaScript Object Notation (JSON) Patch [RFC6902]. One difference between SCIM patch and JSON patch is that SCIM servers do not support array indexing and do not support [RFC6902] operation types relating to array element manipulation such as "move". A patch request, regardless of the number of operations, SHALL be treated as atomic. If a single operation encounters an error condition, the original SCIM resource MUST be restored, and a failure status SHALL be returned.

Policies

Policy

Policy resource. A named list of rules.

PolicyExtensionOciconsolesignonpolicyconsentPolicy

This extension defines attributes used to record consent for modification of the "Security Policy for OCI Console" sign-on policy, Rule, Condition or ConditionGroup.

PolicyPolicyType

PolicyType on which the policy is based
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

PolicyRules

Rules assigned to this policy

PolicySearchRequest

ResourceTypeSchemaAttribute

ResourceTypeSchemaAttribute Schema Definition

ResourceTypeSchemaAttributeSearchRequest

ResourceTypeSchemaAttributes

RestoreOciConsolePolicy

Schema to restoring OCI Console Policy to Factory Defaults.

Rule

Rule resource. A unit that has a condition which on evaluation with input returns defined values.

RuleConditionGroup

Condition or ConditionGroup assigned to the rule
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

RuleExtensionOciconsolesignonpolicyconsentPolicy

This extension defines attributes used to record consent for modification of the "Security Policy for OCI Console" sign-on policy, Rule, Condition or ConditionGroup.

RulePolicyType

PolicyType on which the policy is based
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
uniqueness: none

RuleReturn

The return values are the then portion of a Rule

RuleSearchRequest

Rules

Schema

SCIM schema

SchemaAttributes

A complex type that specifies the set of Resource attributes

SchemaIdcsComplexAttributeNameMappings

Specifies the mapping between external identity source attributes and Oracle Identity Cloud Service complex attributes (e.g. email => emails[work].value)

SchemaIdcsCsvAttributeNameMappings

Csv meta data for those resource type attributes which can be imported / exported from / to csv.

SchemaLocalizedCanonicalValues

A collection of Localized canonical values.

SchemaLocalizedDisplayName

Attribute's localized display name
SCIM++ Properties:

multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

SchemaReferencedResourceTypeUniqueAttributeNameMappings

This attribute specifies the mapping of "uniqueAttributeNameForDisplay" attributes(s) of the referenced resource with the columnHeaderName(s). This attribute should be given in the idcsCsvAttributeNameMappings when uniqueAttributeNameForDisplay contains more than one attribute.

SchemaResolveValueUsingResourceType

This attribute gives a maps for resolving Resource Type after reading it's value from "csvColumnForResolvingResourceType" attribute

SchemaSearchRequest

SchemaSubAttributes

A list specifying the contained attributes

Schemas

SecurityQuestion

Security Question

SecurityQuestionQuestionText

Locale values for the Question

SecurityQuestionSearchRequest

SecurityQuestionSetting

Security Question Settings

SecurityQuestionSettings

SecurityQuestionSettingsSearchRequest

SecurityQuestions

SelfRegistrationProfile

Self Registration Profile

SelfRegistrationProfileAfterSubmitText

Text to be displayed on UI after doing self registration

SelfRegistrationProfileConsentText

Consent text

SelfRegistrationProfileDefaultGroups

Default groups assigned to the user

SelfRegistrationProfileDisplayName

Registration page name

SelfRegistrationProfileEmailTemplate

Email template
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: readWrite
required: true
returned: request
type: complex

SelfRegistrationProfileFooterText

Footer text

SelfRegistrationProfileHeaderText

Header text

SelfRegistrationProfileSearchRequest

SelfRegistrationProfileUserAttributes

User Attributes

SelfRegistrationProfiles

Setting

Settings schema

Settings

SettingsCertificateValidation

Certificate Validation Config
Added In: 2010242156
SCIM++ Properties:

caseExact: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

SettingsCloudGateCorsSettings

A complex attribute that specifies the Cloud Gate cross origin resource sharing settings.
Added In: 2011192329
SCIM++ Properties:

caseExact: false
idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

SettingsCompanyNames

Name of the company in different locales

SettingsDefaultCompanyNames

Default name of the Company in different locales

SettingsDefaultImages

References to various images

SettingsDefaultLoginTexts

Default Login text in different locales

SettingsImages

References to various images

SettingsLoginTexts

SettingsPurgeConfigs

Purge Configs for different Resource Types

SettingsSearchRequest

SettingsTenantCustomClaims

Custom claims associated with the specific tenant

SmtpCredential

User's smtp credential

SmtpCredentialSearchRequest

SmtpCredentialUser

User linked to smtp credential
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

SmtpCredentials

SocialIdentityProvider

Social Identity Provider

SocialIdentityProviderJitProvAssignedGroups

Lists the groups each social JIT-provisioned user is a member. Just-in-Time user-provisioning applies this static list when jitProvGroupStaticListEnabled:true.

SocialIdentityProviderRelayIdpParamMappings

Relay Param variable for Social IDP

SocialIdentityProviderSearchRequest

SocialIdentityProviders

User

User Account

UserAttributesSetting

Schema for End User Attribute mutability

UserAttributesSettings

UserAttributesSettingsAttributeSettings

User Schema Attribute Settings

UserAttributesSettingsSearchRequest

UserCapabilitiesChanger

User Capabilities Changer

UserDbCredential

User's Database Credential

UserDbCredentials

UserDbCredentialsSearchRequest

UserDbCredentialsUser

The user linked to the database credential.
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none

UserEmails

A complex attribute representing emails

UserEntitlements

A list of entitlements for the User that represent a thing the User has.

UserExtAccounts

Accounts assigned to this User. Each value of this attribute refers to an app-specific identity that is owned by this User. Therefore, this attribute is a convenience that allows one to see on each User the Apps to which that User has access.
SCIM++ Properties:

idcsPii: true
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtApiKeys

A list of API keys corresponding to user.
Added In: 2012271618
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtAppRoles

A list of all AppRoles to which this User belongs directly, indirectly or implicitly. The User could belong directly because the User is a member of the AppRole, could belong indirectly because the User is a member of a Group that is a member of the AppRole, or could belong implicitly because the AppRole is public.
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtApplicableAuthenticationTargetApp

The app against which the user will authenticate. The value is not persisted but rather calculated. If the user's delegatedAuthenticationTargetApp is set, that value is returned. Otherwise, the app returned by evaluating the user's applicable Delegated Authentication Policy is returned.
Added In: 18.1.6
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: false
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtApplicablePasswordPolicy

Applicable Password Policy
Added In: 20.1.3
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtAuthTokens

A list of Auth tokens corresponding to user.
Added In: 2012271618
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtBypassCodes

A list of bypass codes that belongs to the user.
Added In: 18.3.6
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtCustomerSecretKeys

A list of customer secret keys corresponding to user.
Added In: 2102181953
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtDbCredentials

A list of database credentials corresponding to user.
Added In: 2102181953
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtDelegatedAuthenticationTargetApp

If set, indicates the user's preferred authentication target app. If not set and the user's \"syncedFromApp\" is set and is enabled for delegated authentication, it is used. Otherwise, the user authenticates locally to Oracle Identity Cloud Service.
Added In: 17.4.6
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

UserExtDevices

A list of devices enrolled by the user.
Added In: 18.3.6
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtFactorIdentifier

Factor Identifier ID
Added In: 20.1.3
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

UserExtGrants

Grants to this User. Each value of this attribute refers to a Grant to this User of some App (and optionally of some entitlement). Therefore, this attribute is a convenience that allows one to see on each User all of the Grants to that User.
SCIM++ Properties:

idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtIdcsAppRolesLimitedToGroups

Description:
Added In: 19.2.1
SCIM++ Properties:

idcsCompositeKey: [value, idcsAppRoleId]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex

UserExtLocked

A complex attribute that indicates an account is locked (blocking any new sessions).
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:Locked, mapsTo:locked.on], [columnHeaderName:Locked Reason, mapsTo:locked.reason], [columnHeaderName:Locked Date, mapsTo:locked.lockDate]]
idcsSearchable: false
idcsAllowUpdatesInReadOnlyMode: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

UserExtManager

The User's manager. A complex type that optionally allows Service Providers to represent organizational hierarchy by referencing the 'id' attribute of another User.
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:Manager, deprecatedColumnHeaderName:Manager Name, mapsTo:manager.value]]
idcsPii: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

UserExtOAuth2ClientCredentials

A list of OAuth2 client credentials corresponding to a user.
Added In: 2012271618
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtPasswordVerifiers

Password Verifiers for DB User.
Added In: 18.2.2
SCIM++ Properties:

idcsCompositeKey: [type]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtPreferredDevice

The user's preferred device.
Added In: 18.3.6
SCIM++ Properties:

caseExact: false
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

UserExtRealmUsers

A list of kerberos realm users for an Oracle Identity Cloud Service User
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

UserExtRecoveryLocked

A complex attribute that indicates a password recovery is locked (blocking any new sessions).
Added In: 19.1.4
SCIM++ Properties:

idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

UserExtRiskScores

The risk score pertaining to the user.
Added In: 18.1.6
SCIM++ Properties:

caseExact: false
idcsCompositeKey: [value]
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

UserExtSecQuestions

The schema used to mnage security question and answers provided by a user for account recovery and/or MFA. While setting up security questions, a user can also provide a hint for the answer.
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

UserExtSelfRegistrationProfile

Self registration profile used when user is self registered.
SCIM++ Properties:

idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: request
type: complex
uniqueness: none

UserExtSmtpCredentials

A list of SMTP credentials corresponding to user.
Added In: 2012271618
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtSocialAccounts

Description:
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
idcsPii: true
type: complex
uniqueness: none

UserExtSupportAccounts

A list of Support Accounts corresponding to user.
Added In: 2103141444
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none

UserExtSyncedFromApp

Managed App or an Identity Source from where the user is synced. If enabled, this Managed App or Identity Source can be used for performing delegated authentication.
Added In: 18.2.6
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

UserExtTermsOfUseConsents

Description:
Added In: 18.2.6
SCIM++ Properties:

idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

UserExtTrustedUserAgents

A list of trusted User Agents owned by this user. Multi-Factored Authentication uses Trusted User Agents to authenticate users. A User Agent is software application that a user uses to issue requests. For example, a User Agent could be a particular browser (possibly one of several executing on a desktop or laptop) or a particular mobile application (again, oneof several executing on a particular mobile device). A User Agent is trusted once the Multi-Factor Authentication has verified it in some way.
Added In: 18.3.6
SCIM++ Properties:

idcsCompositeKey: [value]
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none

UserExtUserToken

User token returned if userFlowControlledByExternalClient is true
Added In: 18.4.2
SCIM++ Properties:

caseExact: false
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none

UserGroups

A list of groups that the user belongs to, either thorough direct membership, nested groups, or dynamically calculated

UserIms

User's instant messaging addresses

UserName

A complex attribute that contains attributes representing the name
SCIM++ Properties:

idcsCsvAttributeNameMappings: [[columnHeaderName:Formatted Name, mapsTo:name.formatted], [columnHeaderName:Honorific Prefix, mapsTo:name.honorificPrefix], [columnHeaderName:First Name, mapsTo:name.givenName], [columnHeaderName:Middle Name, mapsTo:name.middleName], [columnHeaderName:Last Name, mapsTo:name.familyName], [columnHeaderName:Honorific Suffix, mapsTo:name.honorificSuffix]]
idcsPii: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none

type: complex
multiValued: false
required: false
caseExact: false
mutability: readOnly
returned: default
uniqueness: none