According to https://wiki.ca.com/display/IMGC10/How+to+Connect+CA+CloudMinder+to+SCIM, we need to create a new SCIM Endpoint Type with Connector Xpress.
Must SCIM Connector be installed per tenant?
Most connectors come "installed" out of the box. Why do we need to use Connector Xpress and specify a tenant to create SCIM Endpoint?
SCIM connector is not currently included out of the box, therefore CA Secure Cloud relies on ConXp to create a new endpoint type. In turn, since we wanted that endpoint type to be hot-deployed (i.e., without any restarts to IM components), we went with per-tenant basis, as a workflow gets triggered per-tenant for any new endpoint type created.
In the long run we want to have SCIM Connector included out of the box. If anyone views this as a priority please submit an Idea for voting.