Issue:

After updating the Principal Name for a user in Azure, I get a "You cannot update or delete a read-only field" error message when provisioning via SCIM.

Environment:

Azure SCIM using the default attribute mapping of userPrincipalName to userName.

Cause:

The userName field in Torii cannot be changed or deleted once created. 

Resolution:

Delete the affected user(s) using the https://api.toriihq.com/v1.0/scim/v2/Users/{user_id} endpoint then provision the user again.

References:

• https://support.toriihq.com/hc/en-us/articles/9183460072347-Torii-s-SCIM-User-Provisioning