[Fix] SCIM - Add SCIM PATCH and PUT Ops for Users

[ishaan-jaff]

[Fix] SCIM - Add SCIM PATCH and PUT Ops for Users

• Add handling for existing user_emails when using SCIM
• Add handling for PUT, PATCH SCIM Ops for Users
• Refactor SCIM functions to use common utils for team memberships

Relevant issues

Pre-Submission checklist

Please complete all items before asking a LiteLLM maintainer to review your PR

• I have Added testing in the tests/litellm/ directory, Adding at least 1 test is a hard requirement - see details
• I have added a screenshot of my new test passing locally
• My PR passes all unit tests on make test-unit
• My PR's scope is as isolated as possible, it only solves 1 specific problem

Type

🐛 Bug Fix
🧹 Refactoring
✅ Test

Changes

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
litellm	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jun 18, 2025 9:02pm

[Copilot]

Pull Request Overview

This PR adds support for SCIM PATCH and PUT operations for users, refactors team membership handling into shared utilities, and includes new tests for the patch functionality.

• Added unit tests covering field replacement and group membership changes in patch_user
• Made userName and name fields optional in SCIM user models to support partial updates
• Updated SCIM transformation logic to handle both Member instances and dicts when serializing team members

Reviewed Changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated no comments.

File	Description
tests/test_litellm/proxy/management_endpoints/scim/test_scim_patch_user.py	New async tests for patch_user covering field updates and group ops
litellm/types/proxy/management_endpoints/scim_v2.py	Changed SCIMUserName and SCIMUser fields to be optional
litellm/proxy/management_endpoints/scim/scim_transformations.py	Added handling for dict-based Member objects in SCIM conversion

Comments suppressed due to low confidence (3)

tests/test_litellm/proxy/management_endpoints/scim/test_scim_patch_user.py:102

• It would strengthen this test to also assert that mock_db.litellm_usertable.update is called after group membership changes to ensure the updated team list is persisted.

    assert mock_add_fn.called

litellm/types/proxy/management_endpoints/scim_v2.py:46

• [nitpick] Since userName and name are now optional, consider updating the class docstring or relevant API documentation to clarify when these fields may be None and how downstream consumers should handle their absence.

    userName: Optional[str] = None

litellm/proxy/management_endpoints/scim/scim_transformations.py:127

• The Member class is referenced here but not imported in this module, which will raise a NameError at runtime. Please add the appropriate import for Member at the top of the file.

            if isinstance(member, dict):