Identity & platformscim
GET/scim/v2/organizations/{group_id}/Users/{scim_user_id}
One person the identity provider pushed.
get_scim_user
Public
This operation declares no security requirement: it takes no token.
Their userName (email address), display name, external id, whether they are active, and the
teams the identity provider has put them in. A person provisioned for another organization is
not found. Called with one of the organization's SCIM tokens as a bearer.
Parameters
Path
- group_idGroupId (string · uuid)The organization's top-level group
- scim_user_idScimUserId (string · uuid)SCIM user ID
Responses
200The userapplication/json
- userNamestringThe person's sign-in name — for gitmoap, their email address.
- activebooleanoptional
falsetakes away the person's access to the organization;truegives it back. - displayNamestring or nulloptional
emailsarray of ScimEmailoptional
- The ScimEmail schema
- valuestring
- primaryboolean or nulloptional
- typestring or nulloptional
- externalIdstring or nulloptional
groupsarray of ScimMemberRefoptionalThe groups the person is in. Read-only: groups are changed through the group.
- The ScimMemberRef schema
- valuestringThe id of the user or group.
- displaystring or nulloptional
- idstring or nulloptional
metaScimMeta or nulloptional
- The ScimMeta schema
- createdstring · date-time
- lastModifiedstring · date-time
- locationstring
- resourceTypestring
nameScimName or nulloptional
- The ScimName schema
- familyNamestring or nulloptional
- formattedstring or nulloptional
- givenNamestring or nulloptional
- schemasarray of stringoptional
200 exampleSynthesized example
{
"userName": "userName-4eb6",
"active": true,
"displayName": "displayName-1d49",
"emails": [
{
"value": "value-3181"
}
],
"externalId": "externalId-66a9",
"groups": [
{
"value": "value-1ada"
}
],
"id": "id-5b89",
"meta": {
"created": "2026-10-16T01:09:57Z",
"lastModified": "2026-10-16T01:36:28Z",
"location": "location-8c73",
"resourceType": "resourceType-368c"
},
"name": {
"familyName": "familyName-4480",
"formatted": "formatted-8f0b",
"givenName": "givenName-d52b"
},
"schemas": [
"schemas-f3ec",
"schemas-1139"
]
}
401No valid SCIM token of this organizationapplication/json
Error codes
- UNAUTHORIZEDNo credential was sent, or the one sent is invalid, expired or revoked
- detailstring
- schemasarray of string
- statusstringThe HTTP status code, written as text, as the SCIM protocol requires.
- scimTypestring or nulloptional
401 exampleSynthesized example
{
"detail": "detail-2f0c",
"schemas": [
"schemas-108e"
],
"status": "status-3137"
}
404User not foundapplication/json
Error codes
- NOT_FOUNDThe resource does not exist — or exists and you cannot see it: a private resource you have no access to answers exactly as an absent one does
- detailstring
- schemasarray of string
- statusstringThe HTTP status code, written as text, as the SCIM protocol requires.
- scimTypestring or nulloptional
404 exampleSynthesized example
{
"detail": "detail-673f",
"schemas": [
"schemas-5d1d",
"schemas-edf9"
],
"status": "status-d96d"
}
CLI
gitmoap scim get-scim-user
- --group-ididThe organization's top-level group (id or group path)
- --scim-user-ididSCIM user ID