Cohort 2 · Adaptive simulation

Verified 2026-04-27 · Decays 2027-10-27

SCIM is one-way at Hoxhunt. API token is per-admin.

Them · Hoxhunt · SCIM 2.0 + GraphQL

Standards-based provisioning. Per-admin GraphQL token for API access.

  1. 01 Configure SCIM 2.0 (Entra 40-min sync, or Okta JIT)
  2. 02 Per-admin GraphQL Authtoken for API integrations
  3. 03 Token destroyed when that admin de-provisioned
  4. 04 Customer writes Splunk ingestion script · no pre-built connector
  5. 05 Six-subdomain architecture · more allowlist entries

One-way SCIM, token-bound API

Us · Moxso · SCIM 2.0 + service account

Bidirectional SCIM with service-account API model.

  • SCIM 2.0 endpoint

    Native

  • Risk-attribute reverse-sync

    To IdP

  • API auth model

    Service account

  • SIEM connector

    Pre-built

  • Allowlist surface

    Single domain

Service-account-grade integration