[PM-11345] Add SCIM to Teams Plan

[amorask-bitwarden]

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-11345

📔 Objective

1. Add SCIM to the Teams Plan for new customers
2. Update existing Teams Organizations by giving them access to SCIM

📸 Screenshots

⏰ Reminders before review

• Contributor guidelines followed
• All formatters and local linters executed and passed
• Written new unit and / or integration tests where applicable
• Protected functional changes with optionality (feature flags)
• Used internationalization (i18n) for all UI strings
• CI builds passed
• Communicated to DevOps any deployment requirements
• Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

• 👍 (:+1:) or similar for great changes
• 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
• ❓ (:question:) for questions
• 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
• 🎨 (:art:) for suggestions / improvements
• ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
• 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
• ⛏ (:pick:) for minor or nitpick changes

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (main@cb7eecc). Learn more about missing BASE report.
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4924   +/-   ##
=======================================
  Coverage        ?   42.54%           
=======================================
  Files           ?     1389           
  Lines           ?    64745           
  Branches        ?     5943           
=======================================
  Hits            ?    27548           
  Misses          ?    35975           
  Partials        ?     1222           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[cturnbull-bitwarden]

👨‍🍳

[github-actions]

Checkmarx One – Scan Summary & Details – e70d36e6-52e1-4929-9077-3c1304f0a7de

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 240	Attack Vector
	CSRF	/src/Api/Auth/Controllers/TwoFactorController.cs: 438	Attack Vector
	Log_Forging	/src/Api/Billing/Controllers/ProviderClientsController.cs: 29	Attack Vector
	Log_Forging	/src/Api/Billing/Controllers/ProviderClientsController.cs: 29	Attack Vector

Fixed Issues

Severity	Issue	Source File / Package
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 59
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 105
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 95
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 237
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 75
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 361
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 344
	CSRF	/src/Api/Controllers/DevicesController.cs: 73
	CSRF	/src/Api/Controllers/DevicesController.cs: 60
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 263
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 217
	Privacy_Violation	/src/Core/Auth/Services/Implementations/AuthRequestService.cs: 208
	Privacy_Violation	/src/Core/Auth/Services/Implementations/AuthRequestService.cs: 217

[amorask-bitwarden]

@rkac-bw @withinfocus Mind if I ask for a review on this from you two for dbops?

[rkac-bw]

Only updates about 5k records, but I would like to set it's deadlock priority because prod is busy on organization table:

SET DEADLOCK_PRIORITY HIGH;
UPDATE
[dbo].[Organization]
SET
[UseScim] = 1
WHERE
[PlanType] IN (
17, -- Teams (Monthly)
18 -- Teams (Annually)
);

[amorask-bitwarden]

@cturnbull-bitwarden @rkac-bw Can I get another look at this after implementing Robert's suggestion?

[rkac-bw]

LGTM