# Testing SCIM provisioning with keenauth directories simulate

`keenauth directories simulate` runs one SCIM simulator scenario against a directory of a `development` or `staging` environment, so you can test provisioning, the mass deprovision circuit breaker and the provisioning log without connecting an identity provider. The users are a fixed fictional set of 25 people at `example.test` in 5 groups.

The command writes to the directory, so it asks for confirmation. Without a terminal you must pass `--yes`, otherwise it exits with code 2. Use a directory you created for testing. In a production environment the server refuses the request.

## Usage

```sh
keenauth directories simulate dir_01j9xm2n4p6q8r0s2t4v6w8y0z --scenario seed --yes
```

| Flag | Description |
|---|---|
| `--scenario` | Required. `seed`, `bulk_deactivate`, `group_churn`, `attribute_update` or `conflict_email`. |
| `--output`, `-o` | `table`, `json` or `yaml`. Without the flag the CLI prints a table on a terminal and JSON otherwise. |

The result has counts and states only (`status`, `users_created`, `groups_created`, `users_deactivated`, `conflicts`, `circuit_breaker_tripped`, `deprovision_hold`, `failure`). A SCIM error answer makes the run `failed` and fills `failure`; the command still exits with code 0, so check `status` in scripts.

The scenarios, the result fields and the limits are described in [Simulate SCIM provisioning](/docs/api/management/directories/simulate).