From 4a0668e92e3ccb0df28509d4528dbc1278b7c7a9 Mon Sep 17 00:00:00 2001
From: Daniel Hougaard <62331820+DanielHougaard@users.noreply.github.com>
Date: Sat, 9 Mar 2024 08:56:13 +0100
Subject: [PATCH] Feat: Org Scoped JWT Tokens

---
 backend/src/ee/services/scim/scim-service.ts | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/backend/src/ee/services/scim/scim-service.ts b/backend/src/ee/services/scim/scim-service.ts
index c542b2340..1ca881ed0 100644
--- a/backend/src/ee/services/scim/scim-service.ts
+++ b/backend/src/ee/services/scim/scim-service.ts
@@ -429,6 +429,15 @@ export const scimServiceFactory = ({
         });
     }
 
+    const organization = await orgDAL.findById(scimToken.orgId);
+
+    if (!organization.scimEnabled) {
+      throw new ScimRequestError({
+        detail: "SCIM is disabled for the organization",
+        status: 403
+      });
+    }
+
     return { scimTokenId: scimToken.id, orgId: scimToken.orgId };
   };