SCIM 2.0 provisioning

const SCIM_BASE_URL = 'https://api.reelevant.com/v2/scim/v2'

const listUserByUserName = async (userName: string): Promise<unknown> => {
  const url = new URL(`${SCIM_BASE_URL}/Users`)
  url.searchParams.set('filter', `userName eq "${userName}"`)
  url.searchParams.set('startIndex', '1')
  url.searchParams.set('count', '100')

  const response = await fetch(url, {
    headers: {
      'Authorization': `Bearer ${process.env.REELEVANT_SCIM_TOKEN ?? ''}`,
      'Accept': 'application/scim+json',
    },
  })

  const body: unknown = await response.json()
  if (response.ok === false) {
    const error = body as { status: string; scimType?: string; detail: string }
    throw new Error(`SCIM ${error.status} ${error.scimType ?? ''}: ${error.detail}`)
  }
  return body
}

{
  "schemas": ["urn:ietf:params:scim:api:messages:2.0:ListResponse"],
  "totalResults": 1,
  "startIndex": 1,
  "itemsPerPage": 1,
  "Resources": [
    {
      "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
      "id": "6626ef1a2d1f4c0012ab34cd",
      "externalId": "00u1a2b3c4d5e6f7g8h9",
      "userName": "alice@corp.com",
      "active": true,
      "name": { "givenName": "Alice", "familyName": "Martin", "formatted": "Alice Martin" },
      "emails": [{ "value": "alice@corp.com", "type": "work", "primary": true }],
      "roles": [{ "value": "Marketing Editor", "primary": true }],
      "groups": [{ "value": "6626ef1a2d1f4c0012ab34ce", "display": "Marketing", "type": "direct" }],
      "meta": {
        "resourceType": "User",
        "created": "2026-08-11T09:12:00.000Z",
        "lastModified": "2026-08-12T07:31:00.000Z",
        "location": "https://api.reelevant.com/v2/scim/v2/Users/6626ef1a2d1f4c0012ab34cd"
      }
    }
  ]
}

const deactivate = async (userId: string): Promise<void> => {
  const response = await fetch(`https://api.reelevant.com/v2/scim/v2/Users/${userId}`, {
    method: 'PATCH',
    headers: {
      'Authorization': `Bearer ${process.env.REELEVANT_SCIM_TOKEN ?? ''}`,
      'Content-Type': 'application/scim+json',
    },
    body: JSON.stringify({
      schemas: ['urn:ietf:params:scim:api:messages:2.0:PatchOp'],
      Operations: [{ op: 'replace', path: 'active', value: false }],
    }),
  })

  if (response.status !== 200) {
    const error = (await response.json()) as { status: string; scimType?: string; detail: string }
    throw new Error(`Deactivation refused: ${error.detail} (${error.scimType ?? 'no scimType'})`)
  }
}

{
  "schemas": ["urn:ietf:params:scim:api:messages:2.0:Error"],
  "status": "409",
  "scimType": "uniqueness",
  "detail": "User alice@corp.com already exists"
}