6. Privacy Considerations

SCIM Events share information across domains, so deployments are assumed to operate under either a common administrative domain or a cooperative relationship where parties share limited data or signals for user benefit.

Domain-Based Replication (DBR) assumes a common administrative domain and often uses full event payloads. Coordinated Provisioning (CP) minimizes event-message data and uses callback retrieval, such as SCIM GET, so authorization can be checked when data is actually transferred.