Deel SCIM service-provider configuration and user read/search capabilities under the dedicated /scim/v2 surface. The surface is generated from Deel's pinned aggregate OpenAPI document; documented arguments are enumerated, scalar-only requests are fail-closed, array/object-bearing schemas remain descriptive under the runtime's scalar-only closed subset, reads are default-granted, mutations remain grant-off and approval-gated, and credential/session, webhook-secret, and multipart upload operations are excluded.