chainctl
chainctl Chainguard Control
2 min read
For the complete documentation index, see llms.txt.
List the SCIM-provisioned groups of an identity provider.
List the groups a SCIM connector has pushed for an identity provider, with each group’s member count. The External Id is the value an external group role mapping matches on. If the identity provider is omitted, the single identity provider in your organization is used, or you are prompted to choose.
chainctl iam identity-providers scim groups list [IDENTITY_PROVIDER] [--output=json|table] [flags] # List SCIM groups for your organization's identity provider
chainctl iam identity-providers scim groups list
# List for a specific identity provider
chainctl iam identity-providers scim groups list my-idp
# Find a group by its exact display name
chainctl iam identity-providers scim groups list --display-name=Engineering --display-name string Filter by exact display name.
--external-id string Filter by exact external id (the key a role mapping matches on). --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.Last updated: 2026-10-16 17:58