diff --git a/docs/kratos/manage-identities/50_scim.mdx b/docs/kratos/manage-identities/50_scim.mdx index 93dd5d390..daa4a614f 100644 --- a/docs/kratos/manage-identities/50_scim.mdx +++ b/docs/kratos/manage-identities/50_scim.mdx @@ -192,6 +192,6 @@ systems in your organization. - When querying groups with `GET /Groups`, the SCIM server only supports the `eq` operator for filtering, and only with the `displayName` attribute. Other operators like `ne`, `co`, `sw`, and `ew` are not supported. - For both user and group query endpoints, `startIndex` must be lower than 5000, and `count` must be lower than 1000. -- If the user already exists within the project or organization, the provisioning may fail with a 409 conflict error. This is - because the SCIM server cannot modify existing users that have not been provisioned via SCIM. In this case, you need to manually - delete the user first. +- If a user already exists within the same organization, SCIM provisioning will update the user using the configured data mapper. + However, if the user exists in a different organization, provisioning may fail with a 409 Conflict error. In this case, you must + either: manually delete the existing user, or move the user into the target organization before retrying provisioning.