The System for Cross-domain Identity Management (SCIM) is the industry standard protocol for provisioning identity and access management in hybrid landscapes. SCIM enables automated user provisioning and deprovisioning across different systems, including cloud and on-premise environments, by standardizing the exchange of user identity data. It supports operations like creating, updating, and deleting user accounts, making it ideal for managing identities in hybrid SAP landscapes where integration between SAP Cloud Identity Services and on-premise systems is required. SAML (Security Assertion Markup Language) is used for single sign-on authentication, not provisioning. OIDC (OpenID Connect) is an authentication protocol built on OAuth, and SSL (Secure Sockets Layer) is a security protocol for data encryption, not identity provisioning. SCIM's role as a provisioning standard ensures efficient and secure identity management, reducing administrative overhead and enhancing interoperability in complex SAP and non-SAP hybrid environments.

InCloud Identity Services, write transformations allow customization of how data is written to a target system. Both read and write transformations can only be defined forTarget Systems, as they involve sending processed data to external systems or applications.
SAP Security References:
* SAP Cloud Identity Services Transformation Guide
* SAP Target System Integration Documentation