#scim

2025-11-24

Finally, Canaille, our authorization management & single sign-on free software, is released in beta! What this means, is that you can now start to deploy it in production environments. We are looking forward your feedback, about missing features, the documentation legibility, or bugs you may encounter. More details on our blog yaal.coop/blog/en/canaille-beta
#oidc #oauth2 #scim #canaille #iam

2025-11-24

Ça y est, Canaille, notre logiciel libre de gestion d'autorisation et de connexion centralisée, sort en version bêta ! Ce que ça signifie, c'est que vous pouvez commencer à le déployer sur des instances de production. On est très curieux de vos retours, sur les fonctionnalités manquantes, la clarté de la doc, ou les bugs que vous rencontrez. Plus d'infos sur notre blog yaal.coop/blog/canaille-beta
#oidc #oauth2 #scim #canaille #iam

2025-11-22

Grafana patched a CVSS 10.0 SCIM flaw (CVE-2025-41115) after discovering that numeric externalId values could override internal user IDs - enabling impersonation or privilege escalation when SCIM + user sync were active.

Fixes are available in the latest enterprise versions. Immediate updates recommended.

💬 Share your thoughts and follow TechNadu for more technical updates.

#Infosec #Grafana #IAM #SCIM #CVE #SecurityUpdate #VulnerabilityManagement #ThreatIntel #IdentitySecurity #PatchNow #CyberAwareness

Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
SSOJetssojet
2025-11-20

Every engineering team has seen it: mismatched claims, XML loops, signature-validation errors, redirect issues, certificate failures, or SCIM provisioning chaos.

Share your most painful SAML / OIDC / SCIM moment below 👇😭
Let’s help the community decompress.

SSOJet exists because SSO shouldn’t take weeks or break teams to implement.

SSOJetssojet
2025-11-13

Growth shouldn’t be a penalty.

Auth0’s MAU-based pricing punishes successful SaaS teams with unpredictable bills and gated features.

🔧 SSOJet offers a flat-rate identity platform — same enterprise features (SAML, SCIM, MFA) without the exponential cost curve.

Cut your Auth0 bill by 70%. Keep your features.

🔗 Read the guide: How to Cut Your Auth0 Bill by 70% Without Losing Enterprise Features

ssojet.com/blog/how-to-cut-you

SSOJetssojet
2025-11-12

“We can’t sign without SAML.”

That’s when weeks vanish mapping XML.

Plug SSOJet → adds SAML/OIDC & SCIM in hours.

Keep your auth, skip the chaos.

Enterprise SSO done fast.

Karl Fredrik 🦊 🔜 39c3 📞QFOXkfh@chaos.social
2025-11-12

Hot take: all service providers with #SCIM provisioning should have a ringbuffer with the raw requests from the IdP/client so that you can inspect and debug what data is actually being sent

#security #iam

SSOJetssojet
2025-11-11

Auth0’s developer trust is fading fast.

Support delays, unpredictable costs, and forced migrations have made 2025 tough for SaaS teams relying on it.

🔧 SSOJet gives you a simpler path — add enterprise SSO on top of Auth0 (or any IDP), keep your stack, and pay flat-rate pricing.

Devs deserve reliability, not chaos.

🔗 Read the full blog: Auth0 Support After Okta: What Developers Are Saying in 2025

ssojet.com/blog/auth0-support-

2025-09-26

Like every three months, let us summarize our latest contributions to free software. As usual we worked on #SCIM and #OIDC tools, and a little bit on Magic-Wormhole.
yaal.coop/blog/en/dernieres-co
#foss

2025-09-26

Allez, comme tous les 3 mois on fait le point sur nos dernières contributions à des logiciels libres. Au menu pas de surprise, on travaille toujours sur des outils #SCIM et #OIDC, et un peu sur Magic-Wormhole.
yaal.coop/blog/dernieres-contr
#foss

passboltpassbolt
2025-09-24

Passbolt 5.5 is out!
It introduces zero-knowledge mode for encrypted metadata and SCIM provisioning (beta) for Passbolt Pro, strengthening privacy and simplifying user management with your IdP.

Full details here:
hubs.li/Q03KMq0b0

2025-07-21

OpenProject 16.2 has been live since last week!

Have you explored the new features yet?

🎥 Watch the release video to make the most of it — from the refreshed design and smarter time tracking to accessibility improvements and beyond.

👉 youtu.be/KDtqzL2CoWc

#OpenSource #ProjectManagement #SCIM #Accessibility

2025-07-11

OpenProject 16.2 is Coming Soon!

Get a first look at what’s new in our upcoming release.

• New design and improved navigation
• Enhanced PDF exports for work packages
• Accessibility improvements
• SCIM server API (Enterprise add-on)
…with even more improvements coming in the new release.

🗓️ Mark your calendar — OpenProject 16.2 launches on July 16.

#OpenSource #ProjectManagement #OpenProject #SCIM #Accessibility

N-gated Hacker Newsngate
2025-06-05

👨‍💻 Oh, look! Another "expert" explanation on how is the magical solution to untangle your spaghetti 🍝. Spoiler alert: It's just an acronym parade to sell you on another API that'll make your life "easier," like a fourth cup of coffee at 4 PM. ☕🔄
tesseral.com/blog/what-a-devel

2025-05-09

Going beyond SSO, our Francesco Lacerenza decided to take a deep dive into SCIM in our latest blog post. Read it today to learn how including this user identity standard in your next test's scope can reap big rewards!

blog.doyensec.com/2025/05/08/s

#doyensec #appsec #security #scim

Hands typing on a laptop keyboard
2024-12-05

Yaal Coop is proud to present its SCIM toolbox. Those are 4 FLOSS Python libraries to help developers to build SCIM client and servers, and a CLI to administrate and test the compliance of SCIM servers.
Of course, your feedback and contributions are more than welcome!

A warm thanks to @nlnet and @IndieHosters to help us build those tools.

yaal.coop/blog/en/scim2-toolbo
#scim #nlnet

2024-12-05

Yaal Coop est fière de vous présenter sa boîte à outils SCIM. Ce sont 4 bibliothèques Python libres pour aider les développeurs à construire des clients et des serveurs SCIM, et un outil en ligne de commande pour administrer et tester le bon fonctionnement d'un serveur SCIM.
Évidemment, tous vos retours et toutes vos contributions sont accueillies à bras ouverts.

Merci à @nlnet et à @IndieHosters pour nous avoir aider à réaliser ces outils.

yaal.coop/blog/scim2-toolbox
#scim #nlnet

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst