PR Custody

feat(scim): SCIM Group Push auto-creation with org toggle

@sujayjayjaychecks n/achecks…feat/scim-group-push → main33 files · +1638 −81updated 3w ago

▸Description · 2 noise

Adds org-level groupPushAutoCreateEnabled setting (defaults to false) that gates auto-creation of teams from Okta Group Push webhooks
Fixes adminApplicationId resolution in SCIM webhook context (was passing empty string)
Enables rename propagation by default for auto-created teams
Adds updateScimSettings and listScimGroups tRPC procedures for admin UI
Notifies org admins when teams are auto-created or disconnected from IdP
Emits audit events (scim_group_push_team_created, scim_group_push_team_disconnected)
Shows "Group Push" badge on auto-created teams in teams list

File	Change
`packages/types/src/organization-settings.ts`	Add `ScimSettingsSchema` with toggle fields
`apps/admin/server/scim/webhook-ingestion.ts`	Fix adminAppId, add toggle gate, add notifications
`apps/admin/server/scim/repair.ts`	Enable rename propagation for auto-created teams
`apps/admin/server/scim/project.ts`	Disconnection notifications + audit
`apps/admin/server/routers/organizations/update-scim-settings.ts`	New: toggle procedure
`apps/admin/server/routers/organizations/list-scim-groups.ts`	New: list pushed groups
`apps/admin/server/routers/organizations/router.ts`	Register new procedures
`apps/admin/app/teams/page-content.tsx`	"Group Push" badge for auto-created teams
`apps/admin/server/routers/teams/list-operational-teams.ts`	Expose `scimAutoCreated`

Enable groupPushAutoCreateEnabled via updateScimSettings mutation
Simulate group.create webhook with SCIM source marker → verify team auto-created
Verify org admins receive in-app notification for auto-creation
Verify audit log entry for scim_group_push_team_created
Simulate group deletion → verify team marked disconnected + notification sent
Verify listScimGroups returns pushed groups with linked teams
Verify "Group Push" badge appears on teams list for auto-created teams
Type check passes (bunx turbo check-types on @repo/admin)

🤖 Generated with Claude Code

▸ 2 bot/status comments hidden

@vercel[bot]3w ago

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
composio-enterprise-admin	Error		May 18, 2026 9:51pm

Project	Deployment	Actions	Updated (UTC)
composio-enterprise-internal	Skipped		May 18, 2026 9:51pm

@vercel[bot]3w ago

Someone is attempting to deploy this pull request to the Composio Team on Vercel.

No GitHub account was found matching the commit author email address.

To deploy this pull request, the commit author's email address needs to be associated with a GitHub account.

Learn more about how to change the commit author information.

loading diff…