RFC 9967 - System for Cross-Domain Identity Management (SCIM) Profile for Security Event Tokens (SETs)

• Status: Proposed Standard
• Published: May 2026
• Stream: IETF
• Updates: RFC 7643, RFC 7644
• HTTP Field: Set-Txn

Abstract

This RFC defines SCIM Security Events using SETs for asynchronous exchange between SCIM service providers and receivers. It updates RFC 7643 and RFC 7644.

Contents

• 1. Introduction and Overview
• 2. SCIM Events
• 3. Set-Txn Header
• 4. Events Discovery Schema
• 5. Security Considerations
• 6. Privacy Considerations
• 7. IANA Considerations
• 8. References
• Appendix A. Examples and Use Cases

Related Resources

• Official Text: RFC 9967
• Official Page: RFC 9967 DataTracker
• Errata: RFC Editor Errata