fix(scim): sync provider display names and document Okta setup
Merged
WA
2mo ago+441+441+012345678901234567890123456789-30-30-01234567890123456789
Summary
- Sync explicit SCIM display names to Sim accounts, repair stale account names on retries, and preserve name-part updates for existing records.
- Keep optional display names out of responses when omitted and use formatted names as the group-member fallback.
- Add a nested Okta provisioning guide with redacted setup screenshots and expand real HTTP/PostgreSQL regression coverage.
Type of Change
- Bug fix
Testing
- 259 SCIM unit tests and 12 PostgreSQL regressions passed.
- 17 real HTTP scenarios passed across 114 requests, including name drift, access projection, membership guards, lifecycle, and credentials.
- Live Okta: credential testing, user provisioning/update/deactivation/reactivation, group push and rename, workspace grant/removal/restoration, reconciliation, rotation, and downstream group deletion.
- Lint, application/docs type checks, 46 audits, generated artifacts, and migration safety passed. No physical database migration; no live Entra or SSO-login validation claimed.
Checklist
- Code follows project style guidelines
- Self-reviewed my changes
- Tests added/updated and passing
- No new warnings introduced
- I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)