SCIM attribute mapping

SonarQube Server / Community Build
1

Must-share information (formatted with Markdown):

  • SonarQube Server Enterprise 2025.1.3
  • how is SonarQube deployed: zip
  • Provision user accounts with SCIM and Entra ID
  • Succesfully configured SAML
  • Configured SCIM on SonarQube and Entra ID but getting errors for some users

We have configured SCIM on SonarQube and on the Entra ID server for the majority of user this works correct.

But some users are not created and we get an error in the web-logs:
Error while processing request: User name must not be blank

For some other users the last name is set to the string “null”.

Can you please provide some information which customappsso Attribute is used for which purpose in SonarQube.

Thank you,
Andreas

2

Hello,

These are attributes that you define yourself in the SonarQube SAML configuration.

It appears that some users are missing these required attributes, which is preventing them from logging in. I recommend checking the SAML assertion attributes for affected users and comparing them to those that are working. This will help you identify any discrepancies and adjust the IdP configuration accordingly.

3

Hi Colin,

thank you for your reply.
But we want to introduce SCIM and are facing problems with the mappings.

The docs you mentioned are for SAML. Are the same attributes available for SCIM?

Thank you,
Andreas

4

Hey there.

Alright, I understand your question a bit better after doing some research!

SonarQube uses
givenName for the first name
familyName for the last name.
userName is the user’s… username.

This is not exhaustive, but seems like the kind of thing we should have documented. So I’ll ping the team.