4. Events Discovery Schema for Service Provider Configuration

RFC 9967 adds the optional complex attribute securityEvents to ServiceProviderConfig. When absent, it indicates that the SCIM service provider does not support or is not currently configured for Security Events.

securityEvents.asyncRequest is one of "none", "long", or "request". securityEvents.eventUris is a multivalued string listing SET Event URIs the server can generate and deliver via SET streams. Stream registration and configuration are out of scope.