API integration

This page contains an overview of the details required to communicate with Digidentity's SCIM API.

Endpoints

• Pre-production: https://gate.digidentity-preproduction.eu/api/v1/scim/
• Production: https://gate.digidentity.eu/api/v1/scim/

Authentication

Digidentity makes use of bearer token authentication for IGA SCIM implementations.

A bearer token will be provided by Digidentity's Implementation team during onboarding. This will need to be configured in your SCIM application to secure its connection to Digidentity.

Example token:

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoiam9obiIsInJvbGUiOiJ1c2VyIiwiaWF0IjoxNjQyMjI0NzYwfQ.5FJ5FY5Q8Xvnq3YO3bFbTlWbb_oHzxAwZvmch0f5_Tk

Token best practices

1. Keep your token secure:
   • Do not expose your token in URLs, public repositories, or logs.
   • Do not share your token via email, screen-share, or any other unsecured method.
   • Store your token in a trust store or secure environment variable (where applicable).
2. Use HTTPS to prevent interception of the token.
3. Report compromised tokens by contacting Digidentity.