---
title: "Retrieve a scim user. This type of user holds personally identifiable information"
method: GET
path: "/scim/users/{userId}"
tags: ["scim"]
---

# Retrieve a scim user. This type of user holds personally identifiable information

`GET /scim/users/{userId}`

Requires **scim_user:read** scope.

## Path parameters

- `userId` string, required

## Response `200`

Successful User Response

- ScimUser
  - `schemas` string[], required
  - `id` string, required — The unique identifier for a User.
  - `externalId` string, required — A String that is an identifier for the resource as defined by the provisioning client.
  - `meta` object, required
    - `resourceType` 'User', required — The name of the resource type of the resource.
    - `created` string, date-time, required — The date and time the resource was created.
  - `name` object, required
    - `familyName` string, required — The given name or first name of the User
    - `givenName` string, required — The family name or last name of the User
  - `emails` object[], required
    - `value` string, email, required — The email address
    - `primary` boolean, required — Indicates the primary email address. The primary attribute value 'true' MUST appear no more than once.
  - `userType` 'live' | 'guest' — The user type

## Other responses

- `400` — Unsuccessful Response - Bad request - Missing query parameters - Missing body properties
- `401` — Unsuccessful Response - Not authorised - Missing authorization header - Invalid access Token
- `403` — Unsuccessful Response - Forbidden - Invalid scopes
- `404` — Unsuccessful Response - Not Found - User not found

---

[API](https://skmtc.net/moneyhubenterprise/apis/moneyhub-identity-service.md) · [All operations](https://skmtc.net/moneyhubenterprise/apis/moneyhub-identity-service/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/moneyhubenterprise/moneyhub-identity-service/revisions/8841721f7aae/schema)