[IDENTITY-6268] Re-add scim-enabled flag to org CLI commands

[Amelia Dong (ameliadong97)]

Release Notes

New Features

• Re-added the scim-enabled flag to confluent organization update (confluent organization describe/list now also surface SCIM Enabled).

What

Applies to: Confluent Cloud only

#3236 originally added this and was merged, then reverted in #3372.

This PR:

• Pins ccloud-sdk-go-v2/org back to v0.13.0 (the last version with SCIM support) via go.mod/go.sum.
• Re-applies the scim-enabled flag against the current generated organization command structure (post [APIE-1094] Migrate the confluent organization commands excluding the integration test #3431 migration), mirroring the existing jit-enabled pattern.
• Updates goldens and the mock server accordingly.

A PR reverting ccloud-sdk-go-v2#368 is filed separately to restore SCIM support upstream; once merged and released, this can go back to tracking the latest org SDK version.

Blast Radius

Low impact — this only affects customers using confluent organization update --scim-enabled and the new SCIM Enabled column, and reintroduces already-reviewed behavior from #3236.

Test & Review

• go build ./...
• go test ./internal/organization/...
• go test ./test/... -run 'TestCLI/TestOrganization$'
• go test ./test/... -run 'TestCLI/TestHelp$' (full command-tree help goldens, including organization update --help)

References

• Jira: https://confluentinc.atlassian.net/browse/IDENTITY-6268
• Reverts revert: Revert "Add scim_enabled flag to org CLI commands (#3236)" #3372
• Original: Add scim_enabled flag to org CLI commands #3236
• Upstream SDK fix: [APIE-1094] Remove the unsupported SCIM features to align with latest org folder in api ccloud-sdk-go-v2#368 (revert PR pending)

[confluent-cla-assistant]

🎉 All Contributor License Agreements have been signed. Ready to merge.
_{Please push an empty commit if you would like to re-run the checks to verify CLA status for all contributors.}

[Copilot]

Pull request overview

This PR reintroduces SCIM support in the confluent organization command group by pinning ccloud-sdk-go-v2/org back to v0.13.0 (where ScimEnabled exists) and wiring --scim-enabled + SCIM Enabled output into the generated organization commands and integration-test fixtures.

Changes:

• Re-adds --scim-enabled to confluent organization update, mirroring the existing jit-enabled pattern.
• Surfaces SCIM Enabled in organization describe/list/update human + JSON outputs.
• Pins github.com/confluentinc/ccloud-sdk-go-v2/org to v0.13.0 and updates mocks/goldens accordingly.

Reviewed changes

Copilot reviewed 10 out of 14 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
internal/organization/command.go	Adds ScimEnabled to the organization output model and print path.
internal/organization/command_list.go	Includes scim_enabled in list output rows.
internal/organization/command_update.go	Adds --scim-enabled flag and PATCH request population when the flag is set.
test/test-server/org_handlers.go	Updates mock org responses to include ScimEnabled values.
test/fixtures/output/organization/describe.golden	Updates human describe output to include SCIM Enabled.
test/fixtures/output/organization/describe-json.golden	Updates JSON describe output to include scim_enabled.
test/fixtures/output/organization/list.golden	Updates human list output to include SCIM Enabled column.
test/fixtures/output/organization/list-json.golden	Updates JSON list output to include scim_enabled.
test/fixtures/output/organization/update.golden	Updates human update output to include SCIM Enabled.
test/fixtures/output/organization/update-json.golden	Updates JSON update output to include scim_enabled.
test/fixtures/output/organization/update-help.golden	Updates help output to include the --scim-enabled flag.
go.mod	Pins ccloud-sdk-go-v2/org dependency to v0.13.0.
go.sum	Updates sums for the pinned org module version.
cmd/lint/main.go	Adds scim to the CLI spellcheck vocabulary.

Files not reviewed (3)

• internal/organization/command.go: Generated file
• internal/organization/command_list.go: Generated file
• internal/organization/command_update.go: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Amelia Dong (ameliadong97)]

Local test:

> confluent organization describe
+--------------+--------------------------------------+
| Current      | true                                 |
| ID           | 9a8d9d15-2f12-4e87-86b8-36b44988cc9a |
| Name         | Confluent | test                     |
| JIT Enabled  | true                                 |
| SCIM Enabled | true                                 |
+--------------+--------------------------------------+

> confluent organization update --scim-enabled=false
Updated organization "9a8d9d15-2f12-4e87-86b8-36b44988cc9a".
+--------------+--------------------------------------+
| Current      | true                                 |
| ID           | 9a8d9d15-2f12-4e87-86b8-36b44988cc9a |
| Name         | Confluent | test                     |
| JIT Enabled  | true                                 |
| SCIM Enabled | false                                |
+--------------+--------------------------------------+

> confluent organization update --scim-enabled=true
Updated organization "9a8d9d15-2f12-4e87-86b8-36b44988cc9a".
+--------------+--------------------------------------+
| Current      | true                                 |
| ID           | 9a8d9d15-2f12-4e87-86b8-36b44988cc9a |
| Name         | Confluent | test                     |
| JIT Enabled  | true                                 |
| SCIM Enabled | true                                 |
+--------------+--------------------------------------+

> confluent organization describe -o json
{
  "is_current": true,
  "id": "9a8d9d15-2f12-4e87-86b8-36b44988cc9a",
  "name": "Confluent | test",
  "jit_enabled": true,
  "scim_enabled": true
}

// If add-on is not enabled:
> confluent organization update --scim-enabled=true
Error: SCIM requires the Advanced Security addon

Suggestions:
    List available organizations with `confluent organization list`.

> confluent organization update --help
Update the current organization.

Usage:
  confluent organization update [flags]

Flags:
      --name string      Name of the Confluent Cloud organization.
      --jit-enabled      Toggle Just-In-Time (JIT) user provisioning for SSO-enabled organizations.
      --scim-enabled     Toggle System for Cross-domain Identity Management (SCIM) user provisioning for SSO-enabled organizations.
      --context string   CLI context name.
  -o, --output string    Specify the output format as "human", "json", or "yaml". (default "human")

Global Flags:
  -h, --help            Show help for this command.
      --unsafe-trace    Equivalent to -vvvv, but also log HTTP requests and responses which might contain plaintext secrets.
  -v, --verbose count   Increase verbosity (-v for warn, -vv for info, -vvv for debug, -vvvv for trace).

[sonarqube-confluent]

Quality Gate passed

Issues
1 New issue
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
50.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube