How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

OneTrust Platform — User Provisioning

OneTrust supports cross-domain identity management through the SCIM 2.0 specification. System for Cr oss-Domain Identity Management (SCIM) is an open specification to help facilitate the automated mana gement of user identities and groups in cloud applications using RESTful APIs. This allows organizat ions to manage and update user information and group information across domains and applications. (2 6 operations.)

OneTrust Platform — User Provisioning is one of 37 APIs that OneTrust publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Groups V2, Resources V3, SCIM Schemas V3, Service Provider V3, and User Groups V3. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 26 operations across 13 paths, organized into 7 resource areas, and defines 24 schemas. It is described by OpenAPI 3.1.0, at version 1.0.

Requests are made against a single base URL, https://{hostname}.

26 operations 13 paths 24 schemas 2 DELETE13 GET4 PATCH3 POST4 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
1.0
Base URL
https://app.onetrust.com
Authentication
OAuth 2.0
License
Resource Areas
7

Authentication & Security 1

OneTrust Platform — User Provisioning declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (OAUTH2) using the clientCredentials flow, exposing 1 scope.

Paths & Operations 26

Across 13 paths, the API surfaces 26 operations — 2 DELETE, 13 GET, 4 PATCH, 3 POST, 4 PUT. They span 7 resource areas: Groups V2, Users V2, User Groups V3, Resources V3, SCIM Schemas V3, Service Provider V3, Users V3. Each is listed below with its method, path, parameters, and response codes.

Groups V2 4

V2 version APIs to manage Groups.

GET
/api/scim/v2/Groups
Get List of Groups
listGroupsUsingGET 2 params → 200400401403429500
GET
/api/scim/v2/Groups/{groupId}
Get Group
getGroupResourceUsingGET 2 params → 200400401403429500
PUT
/api/scim/v2/Groups/{groupId}
Update Group
updateGroupMembersUsingPUT 1 param body → 200400401403429500
PATCH
/api/scim/v2/Groups/{groupId}
Modify Group
updateGroupMembersUsingPATCH 1 param body → 204400401403429500
Users V2 6

V2 version APIs to manage Users.

GET
/api/scim/v2/Users
Get List of Users
getAllUsersUsingGET 2 params → 200400401403429500
POST
/api/scim/v2/Users
Create User
createUserUsingPOST body → 201400401403429500
GET
/api/scim/v2/Users/{id}
Get User
getUserUsingGET 1 param → 200400401403429500
PUT
/api/scim/v2/Users/{id}
Update User
updateUserUsingPUT 1 param body → 200400401403429500
DELETE
/api/scim/v2/Users/{id}
Delete User
deleteUserUsingDELETE 1 param → 204400401403429500
PATCH
/api/scim/v2/Users/{id}
Modify User
patchUserUsingPATCH 1 param body → 200400401403429500
User Groups V3 6

V3 version APIs to manager User Groups.

GET
/api/scim/v3/Groups
Get List of User Groups
getGroups 4 params → 200400401403429500
POST
/api/scim/v3/Groups
Create User Group
createGroup body → 201400401403429500
GET
/api/scim/v3/Groups/{groupId}
Get User Group
getGroupById 2 params → 200400401403429500
PUT
/api/scim/v3/Groups/{groupId}
Update User Group
updateGroup 1 param body → 200400401403429500
DELETE
/api/scim/v3/Groups/{groupId}
Delete User Group
deleteGroup 1 param → 204400401403429500
PATCH
/api/scim/v3/Groups/{groupId}
Modify User Group
modifyGroup 1 param body → 204400401403429500
Resources V3 2

V3 version APIs to manager Resources Type.

GET
/api/scim/v3/ResourceTypes
Get Supported Resources
getResourceTypesUsingGET → 200400401403429500
GET
/api/scim/v3/ResourceTypes/{resourceName}
Get Supported Resource Types
getResourceTypesByNameUsingGET 1 param → 200400401403429500
SCIM Schemas V3 2

V3 version APIs to manager Schemas.

GET
/api/scim/v3/Schemas
Get List of Supported SCIM Schemas
getSchemasUsingGET → 200400401403429500
GET
/api/scim/v3/Schemas/{schemaName}
Get SCIM Schema
getSchemasByNameUsingGET 1 param → 200400401403429500
Service Provider V3 1

V3 version APIs to manager the Service Provider.

GET
/api/scim/v3/ServiceProviderConfig
Get Service Provider Configuration
getServiceProviderConfigUsingGET → 200400401403429500
Users V3 5

V3 version APIs to manager Users.

GET
/api/scim/v3/Users
Get List of Users
getUsers 3 params → 200400401403429500
POST
/api/scim/v3/Users
Create User
createUser body → 201400401403429500
GET
/api/scim/v3/Users/{id}
Get User
getUserById 1 param → 200400401403429500
PUT
/api/scim/v3/Users/{id}
Update User
updateUser 1 param body → 200400401403429500
PATCH
/api/scim/v3/Users/{id}
Modify User
modifyUser 1 param body → 200400401403429500

Schemas 24

The contract defines 24 schemas that model the data the API accepts and returns. The most detailed are ServiceProviderConfig (10 properties), EnterpriseUser (8 properties), ResourceTypeResource (7 properties), GroupResource (7 properties). Each schema is shown below with its type and property counts.

UserGroup
object
2 properties
Email
object
5 properties 1 required
AbstractBaseResource
object
4 properties
EnterpriseUser
object
8 properties
GroupResource
object
7 properties 1 required
Manager
object
3 properties 1 required
Member
object
3 properties 1 required
Meta
object
6 properties
Name
object
2 properties
OneTrustGroup
object
2 properties
Operation
object
4 properties
PatchGroupResourceRequest
UserResource
object
1 required
PatchUserResourceRequest
object
5 properties
UserPatchApiOperation
object
3 properties 2 required
ResourceTypeResource
object
7 properties 5 required
SchemaExtension
object
2 properties 2 required
AuthenticationScheme
object
6 properties
BulkSupported
object
3 properties
FilterSupported
object
2 properties
ServiceProviderConfig
object
10 properties
Supported
object
1 property
ListResponse
object
5 properties
SchemaResource
object
5 properties 5 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

onetrust-platform-user-provisioning-openapi.json Raw ↑

Other APIs OneTrust publishes across the network.

OneTrust AI Governance — AI Governance
OneTrust Platform — Global Activity
OneTrust Consent & Preferences — Consent Interfaces
OneTrust Consent & Preferences — Consent Management Platform (CMP)
OneTrust Consent & Preferences — Consent Receipts
OneTrust Consent & Preferences — Cookie Consent
OneTrust Consent & Preferences — Cookie Consent (Swagger)
OneTrust Consent & Preferences — Cookie Domain Data
OneTrust Consent & Preferences — Cross-Device Consent
OneTrust Consent & Preferences — Mobile App Consent
OneTrust Consent & Preferences — Policy & Notice Management
OneTrust Consent & Preferences — Universal Consent & Preference Management (OAS)
Where this information came from

This is an independent, third-party profile of OneTrust Platform — User Provisioning, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.