A blazingly fast, lightweight SCIM 2.0 server built in Go that makes identity management simple and scalable 🔥
GoSCIM is the fastest and most flexible open-source implementation of the SCIM 2.0 protocol. Built with Go's performance and simplicity in mind, it's designed to handle anything from small startups to enterprise-scale identity management.
- 🚀 Blazing Fast: Built in Go for maximum performance and minimal resource usage
- 🔧 Plug & Play: Works out of the box with dynamic schema loading
- 🌐 Universal: Integrates with Active Directory, LDAP, Salesforce, Slack, and more
- 📈 Scalable: From 10 users to 100,000+ with horizontal scaling
- 🛡️ Secure: Enterprise-grade security with OAuth 2.0 and role-based access control
- 🎯 SCIM 2.0 Compliant: Full RFC 7643/7644 implementation
- 🔍 Smart Filtering: Advanced ANTLR-based filter parser for complex queries
- 📊 Observable: Built-in metrics, logging, and health checks
- Startups building their first identity system
- Enterprises replacing expensive identity solutions
- DevOps Teams automating user provisioning
- SaaS Companies needing multi-tenant identity management
- Developers learning SCIM protocol implementation
Get GoSCIM running in under 2 minutes:
# Clone and run with Docker
git clone https://github.com/arturoeanton/goscim.git
cd goscim
docker-compose up -d
# Or build from source
go run main.goVisit http://localhost:8080/ServiceProviderConfig to see your SCIM server in action! 🎉
No code changes needed - just drop JSON schemas and restart:
{
"id": "urn:ietf:params:scim:schemas:custom:2.0:Employee",
"name": "Employee",
"attributes": [
{
"name": "employeeId",
"type": "string",
"required": true,
"uniqueness": "server"
}
]
}Advanced filtering with natural syntax:
GET /Users?filter=name.familyName co "Garcia" and active eq true
GET /Users?filter=emails[type eq "work" and value ew "@company.com"]Connect to any system with our flexible connector architecture:
// Custom connector in just a few lines
func (c *CustomConnector) SyncUsers() error {
users := c.externalSystem.GetUsers()
for _, user := range users {
scimUser := convertToSCIM(user)
c.scimClient.CreateOrUpdateUser(scimUser)
}
return nil
}curl -X POST https://your-scim-server.com/scim/v2/Users \
-H "Content-Type: application/json" \
-d '{
"schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
"userName": "jane.doe@company.com",
"name": {
"familyName": "Doe",
"givenName": "Jane"
},
"emails": [{
"value": "jane.doe@company.com",
"type": "work",
"primary": true
}],
"active": true
}'curl "https://your-scim-server.com/scim/v2/Users?filter=userName sw 'admin'&sortBy=name.familyName"curl -X PATCH https://your-scim-server.com/scim/v2/Users/123 \
-H "Content-Type: application/json" \
-d '{
"schemas": ["urn:ietf:params:scim:api:messages:2.0:PatchOp"],
"Operations": [{
"op": "replace",
"path": "active",
"value": false
}]
}'┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ Your Apps │ │ Identity │ │ External │
│ (Consumers) │◄──►│ Hub (GoSCIM) │◄──►│ Systems │
│ │ │ │ │ (Providers) │
└─────────────────┘ └─────────────────┘ └─────────────────┘
- Stateless Design: Scale horizontally with ease
- Couchbase Backend: NoSQL flexibility with ACID compliance
- Microservices Ready: Deploy as containers or serverless functions
- Event-Driven: Webhooks and real-time notifications
| Metric | Small Team | Growing Company | Enterprise |
|---|---|---|---|
| Users | < 1,000 | < 10,000 | 100,000+ |
| Requests/sec | 500+ | 2,000+ | 10,000+ |
| Response Time | < 50ms | < 100ms | < 200ms |
| Memory Usage | 256MB | 1GB | 4GB+ |
All measurements on standard cloud instances
We're building something special, and we'd love your help!
- Add new identity provider connectors
- Improve the web UI (coming soon!)
- Write tutorials and blog posts
- Create Docker images and Helm charts
- Add support for additional databases
- Implement advanced monitoring features
Special thanks to all our contributors! Every contribution matters, from bug reports to major features.
| Topic | Link |
|---|---|
| 🚀 Getting Started | docs/en/getting-started.md |
| 🔧 Installation Guide | docs/en/installation.md |
| 📖 API Reference | docs/en/api-reference.md |
| 🏗️ Architecture | docs/en/architecture.md |
| 🛡️ Security Guide | docs/en/security.md |
| 🔌 Integrations | docs/en/integrations.md |
| 👩💻 Developer Guide | docs/en/development.md |
| 🚀 Operations | docs/en/operations.md |
- Language: Go 1.16+
- Database: Couchbase (NoSQL)
- Web Framework: Gin
- Query Parser: ANTLR v4
- Monitoring: Prometheus & Grafana
- Auth: OAuth 2.0 / JWT
- Deployment: Docker, Kubernetes
- ✅ Core SCIM Operations: CREATE, READ, UPDATE, DELETE, SEARCH
- ✅ Advanced Filtering: Full SCIM filter expression support
- ✅ Schema Extensions: Custom attributes and resource types
- ✅ Role-Based Access: Granular permission system
- 🚧 Bulk Operations: In development
- 🚧 Web UI: Coming soon
- 📋 GraphQL API: Planned
- 📋 Event Streaming: Planned
Employee Onboarding → GoSCIM → Automatic provisioning in:
├── Active Directory
├── Salesforce
├── Slack
├── Jira
└── Custom Apps
Customer Signup → GoSCIM → Isolated tenant with:
├── Custom schemas
├── Role-based access
├── Branded experience
└── API access
User Changes → GoSCIM → Automated:
├── Audit logging
├── Compliance reports
├── Access reviews
└── Webhook notifications
We believe identity management should be accessible, transparent, and community-driven. By open-sourcing GoSCIM, we're empowering developers worldwide to build better identity solutions.
Join us in democratizing identity management! 🚀
GoSCIM is released under the MIT License. Feel free to use it in your projects, contribute back, and help us make identity management better for everyone!
Commercial use is welcomed, but we'd appreciate:
- 🌟 A star on GitHub
- 📢 Attribution in your project
- 🤝 Contributing improvements back to the community
- Built with ❤️ by Arturo Anton and the community
- Inspired by the SCIM protocol and the need for simple, scalable identity management
- Special thanks to all contributors and early adopters!
⭐ Star us on GitHub • 🐛 Report Issues • 💬 Join Discussions
Made with ❤️ for the developer community