SCIM Group PATCH supports member value filter paths
Introduced 2026-10-15 · score 0.92
HOW TO USE IT
When removing a member from an existing SCIM Group, set the PATCH operation’s `path` to `members[value eq "<user-id>"]`.
WHY THIS HELPS
Remove a SCIM Group member using a value-filter path.
REQUIREMENTS AND LIMITATIONS
- Version: v2.2.0
- Operations[].path: On a remove operation, use `members[value eq "<user-id>"]` to target the member. The Vault API docs do not specify this path form; it is stated in the v2.2.0 release note.
- Prerequisite: SCIM requires Vault Enterprise and activation of the SCIM feature flag. Authenticate with a Vault token whose entity matches the SCIM client’s `access_grant_principal`; the client also needs ACL permission for the SCIM Groups endpoint.
- The path form is supported on remove operations.
FIRST-PARTY EVIDENCE
- https://github.com/hashicorp/vault/releases/tag/v2.2.0
- https://developer.hashicorp.com/vault/docs/enterprise/scim-overview
Check the installed version and the source before using it. Entry JSON