Issue Summary

Irrespective of the licenses, the customers who have SCIM Sync enabled can sync users/groups from an external directory. In this process, SCIM does not perform any license/user limit checks. 

Steps to Reproduce

• Ensure that the product is set with specific user limits based on their subscription.

• Enable SCIM Sync for the organization.

• Configure the IDP to sync more users/groups than the actual license or user limit.

• Initiate the sync process.

Expected Results

The system should incorporate a validation step within the SCIM Sync process to verify the number of users/groups being synced against the customer’s license or user limit before completing the sync operation. If the sync operation exceeds the limit, it should either prevent additional users/groups from being synced or alert the administrator to the issue.

Actual Results

The SCIM Sync process completes without performing any checks for license/user limits, allowing users/groups to be synced to the system irrespective of the customer's license or user limit. 

Workaround

NA