[EC-261] SCIM (#2105)

* scim project stub

* some scim models and v2 controllers

* implement some v2 scim endpoints

* fix spacing

* api key auth

* EC-261 - SCIM Org API Key and connection type config

* EC-261 - Fix lint errors/formatting

* updates for okta implementation testing

* fix var ref

* updates from testing with Okta

* implement scim context via provider parsing

* support single and list of ids for add/remove groups

* log ops not handled

* touch up scim context

* group list filtering

* EC-261 - Additional SCIM provider types

* EC-265 - UseScim flag and license update

* EC-265 - SCIM provider type of default (0)

* EC-265 - Add Scim URL and update connection validation

* EC-265 - Model validation and cleanup for SCIM keys

* implement scim org connection

* EC-265 - Ensure ServiceUrl is not persisted to DB

* EC-265 - Exclude provider type from DB if not configured

* EC-261 - EF Migrations for SCIM

* add docker builds for scim

* EC-261 - Fix failing permissions tests

* EC-261 - Fix unit tests and pgsql migrations

* Formatting fixes from linter

* EC-265 - Remove service URL from scim config

* EC-265 - Fix unit tests, removed wayward validation

* EC-265 - Require self-hosted for billing sync org conn

* EC-265 - Fix formatting issues - whitespace

* EC-261 - PR feedback and cleanup

* scim constants rename

* no scim settings right now

* update project name

* delete package lock

* update appsettings configs for scim

* use default scim provider for context

Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>

src/Core/Models/Data/Organizations/OrganizationAbility.cs

@@ -17,6 +17,7 @@ namespace Bit.Core.Models.Data.Organizations
             Enabled = organization.Enabled;
             UseSso = organization.UseSso;
             UseKeyConnector = organization.UseKeyConnector;
+            UseScim = organization.UseScim;
             UseResetPassword = organization.UseResetPassword;
         }
 
@@ -28,6 +29,7 @@ namespace Bit.Core.Models.Data.Organizations
         public bool Enabled { get; set; }
         public bool UseSso { get; set; }
         public bool UseKeyConnector { get; set; }
+        public bool UseScim { get; set; }
         public bool UseResetPassword { get; set; }
     }
 }

src/Core/Models/Data/Organizations/OrganizationUsers/OrganizationUserOrganizationDetails.cs

@@ -8,6 +8,7 @@
         public bool UsePolicies { get; set; }
         public bool UseSso { get; set; }
         public bool UseKeyConnector { get; set; }
+        public bool UseScim { get; set; }
         public bool UseGroups { get; set; }
         public bool UseDirectory { get; set; }
         public bool UseEvents { get; set; }

src/Core/Models/Data/Permissions.cs

@@ -21,6 +21,7 @@ namespace Bit.Core.Models.Data
         public bool ManageSso { get; set; }
         public bool ManageUsers { get; set; }
         public bool ManageResetPassword { get; set; }
+        public bool ManageScim { get; set; }
 
         [JsonIgnore]
         public List<(bool Permission, string ClaimName)> ClaimsMap => new()
@@ -38,6 +39,7 @@ namespace Bit.Core.Models.Data
             (ManageSso, "managesso"),
             (ManageUsers, "manageusers"),
             (ManageResetPassword, "manageresetpassword"),
+            (ManageScim, "managescim"),
         };
     }
 }

src/Core/Models/Data/Provider/ProviderUserOrganizationDetails.cs

@@ -10,6 +10,7 @@ namespace Bit.Core.Models.Data
         public bool UsePolicies { get; set; }
         public bool UseSso { get; set; }
         public bool UseKeyConnector { get; set; }
+        public bool UseScim { get; set; }
         public bool UseGroups { get; set; }
         public bool UseDirectory { get; set; }
         public bool UseEvents { get; set; }