SCIM provisioning patterns that actually work

SCIM is the standard for cross-system identity provisioning, but the implementation varies more than the spec suggests. The piece covers the patterns we use in practice.