[auth48] Re: AUTH48: RFC-to-be 9944 <draft-ietf-scim-device-model-18> for your review

Kaelin Foody <kfoody@staff.rfc-editor.org> Thu, 09 April 2026 18:24 UTC

Return-Path: <kfoody@staff.rfc-editor.org>
X-Original-To: auth48archive@mail2.ietf.org
Delivered-To: auth48archive@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 5B87FD8E2A01 for <auth48archive@mail2.ietf.org>; Thu, 9 Apr 2026 11:24:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775759073; bh=tMwht3CpCu9gAemA49aB+GIOsL1raEMcaZ2ghHCCR14=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=aR9BXhFJRCTrL0rDqrXxUaqN7GXSiJa+fqNOqxDXKPMB+e4RvSSvNYILUlUco0jj2 PDhXpFh8S5aMXd7jBThEH/seT4eEr9gosgZfaw2HGCTTf3/GeuXxKlENDpHK+nYFwm nP8ruz2plE1Zz1Bh1LnhY7QX6F8gHQ/5QOzM7j1o=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=staff-rfc-editor-org.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xos7QsXNQrDx for <auth48archive@mail2.ietf.org>; Thu, 9 Apr 2026 11:24:32 -0700 (PDT)
Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 2B83DD8E29E3 for <auth48archive@rfc-editor.org>; Thu, 9 Apr 2026 11:24:32 -0700 (PDT)
Received: by mail-qk1-x72f.google.com with SMTP id af79cd13be357-8cfdac74050so122176085a.3 for <auth48archive@rfc-editor.org>; Thu, 09 Apr 2026 11:24:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=staff-rfc-editor-org.20251104.gappssmtp.com; s=20251104; t=1775759065; x=1776363865; darn=rfc-editor.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=SLR4XxRTuEE0XCWlHybTBho2+QsuyrLlahmxrHEPjDo=; b=imtCNzu8LyjLVDEcKG79Pze0dK4tLlo3YBcYTEdj7F9yASpItdJxOsIxWIc2ZMObkh 4ha+gIP71GUfkVifN9CBtQ8mtxwhwdOQmuWyFSMhpzhWBJkgJkkz6EvGfg+1KR0ni+ty h6/DZf1DR79WH2hpQ+Bt4KsQiTZNx5t84pmJS3t19cKYbNZS9vOyr3GYCyV92o/2SwPT YBbRbdKXQ0OXcQBuZKyY/86FoLVnDbb0hFcY2Io/wL12O6kWP7/gpa+RnkCBNoZHyzM7 HUYEEm67ahe7sECHo9WoMo1GZdDHY3fn9STiMRJa0gJUSbvHppBnz9ooyilqpESa+ylO om2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775759065; x=1776363865; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=SLR4XxRTuEE0XCWlHybTBho2+QsuyrLlahmxrHEPjDo=; b=LFspfEsuVxc5/OBa8pZ4rcZKa5b2S0Y0e2JsfqCGAEDy6rAiqs3Vw2GbxhJmoCXmBv uj1tQF6iDjWYzMOy3CS5aYITQtKVozi6263EfKeDktvW+o6rlyXdSm0FjHI7m+g2+//z c0mwiXgxExGS9eB95/XZZGvhRCeVqBkN8yhn3P7Y3cwfoYseZGp1ksDYYp7FicpJAuZT gdCLLE5Hoy12c53Jc+oaE95oN+p0cwy5bGixQ3OH8QRHiLke384fbZzt8Ypyi2ZppvaA Zv9mp9K8fmzEeUzCQ619454bCyEZfIzhGB+KbuMXQRAj82IThVueWiF/EOkDZlqEn3Ku FQ7A==
X-Forwarded-Encrypted: i=1; AJvYcCWNdnCchQFvXdOpFqctZgYhpjc8VtRMmi6Ld/+eTy8AICynT64H8kbIyMTYwLuwN28Zoyz2Wqx1o9abi/mB@rfc-editor.org
X-Gm-Message-State: AOJu0Yw4nIgdfXpdzfNvFffr8xtg+j2Q/GmXvldstWNQnI4DfSphLtbB P/v+RYnobkOaPASz2aTJYYsvC6R/r21KKnvKoAX20ocWsOe7JNms7jnSyMIRyDQUfgBbLg==
X-Gm-Gg: AeBDievKu2zvc9o3tRG3hU0VKIX8zO+XGjOFw3wkbuh8DgmU/HaAXdyozJSFPXYrbRe Wr1ueIB25biLrVCGegn+wwlIm7TrReFNL5lKSXgSRhBWuyDfkp5YfXniSlth01aAAi5W4o5K2Ni Y+ZwTBQvjbgRDefsgNphw0eCIw0mm8vz/9XE/CodIdlgmbEtJBUdLvTG8fdBtflnAK5kkt83Z3e J/35SyL+zFJhaZgpHaZ1v1GS1y6LLSG+BdeCJgN5mBCqwwdEshxSKazffVElk+4whOBidemzhfY /NztTP5If1o/fSBgAsv3iHaokWu9xDtNr3kZrvaHDYWtHcmvTH2BHuXgep8/SGdod9VlgDGX8sp CKzLiGfYubcUYW0/gaGooE+62jT0GWmD8iEvSLKzX5NpBOftKORo+vu0BwTs6e05avxU2HbgJ0z 2x62I/b2sjaFfhBOwMsNTLv5LaGxDmEPYX3m3j6M+HkP3fx5zNEwIkqMhTkqyXn4xnew==
X-Received: by 2002:a05:620a:4453:b0:8cf:d441:c7c0 with SMTP id af79cd13be357-8d41db4e251mr3698739085a.34.1775759065415; Thu, 09 Apr 2026 11:24:25 -0700 (PDT)
Received: from smtpclient.apple ([2600:4040:6006:e300:7c2f:98ea:7328:3bc0]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8ddb6949954sm14954185a.21.2026.04.09.11.24.23 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 09 Apr 2026 11:24:24 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.400.21\))
From: Kaelin Foody <kfoody@staff.rfc-editor.org>
In-Reply-To: <ACDAC378-8B56-4912-B3AD-4366692FFB32@cisco.com>
Date: Thu, 09 Apr 2026 14:23:53 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <00E7EF1E-ABB9-4D6A-88AD-CD1583847528@staff.rfc-editor.org>
References: <ACDAC378-8B56-4912-B3AD-4366692FFB32@cisco.com>
To: Eliot Lear <lear@cisco.com>
X-Mailer: Apple Mail (2.3864.400.21)
Message-ID-Hash: LEW3SK47D4RXAXXNF3VO37BR65Y2ATIV
X-Message-ID-Hash: LEW3SK47D4RXAXXNF3VO37BR65Y2ATIV
X-MailFrom: kfoody@staff.rfc-editor.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Hassan <hassaniqbal931@gmail.com>, Muhammed Shahzad <mshahza@ncsu.edu>, rfc-editor@rfc-editor.org, "Nancy Cam-Winget (ncamwing)" <ncamwing@cisco.com>, auth48archive@rfc-editor.org, scim-ads@ietf.org, scim-chairs@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [auth48] Re: AUTH48: RFC-to-be 9944 <draft-ietf-scim-device-model-18> for your review
List-Id: "Archiving AUTH48 exchanges between the RFC Production Center, the authors, and other related parties" <auth48archive.rfc-editor.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/auth48archive/JBfrkvgd8lLOQ_hS51piAItlThA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/auth48archive>
List-Help: <mailto:auth48archive-request@rfc-editor.org?subject=help>
List-Owner: <mailto:auth48archive-owner@rfc-editor.org>
List-Post: <mailto:auth48archive@rfc-editor.org>
List-Subscribe: <mailto:auth48archive-join@rfc-editor.org>
List-Unsubscribe: <mailto:auth48archive-leave@rfc-editor.org>

Hi Eliot, all,

We have updated the files as requested. These updates are best viewed here: https://www.rfc-editor.org/authors/rfc9944-lastrfcdiff.html.

A few follow-up questions regarding these updates:

a) Section 6.3.1, Table 2:
We have updated this table accordingly. May we also add a value for “Imm” in the legend that appears after this table?

Perhaps:
   Imm = Immutable

b) Section 7.6.2, Table 8: 
In the “Mutable” column of this table, should the $ref attribute’s value be updated from “R” to “RO” as well (to match the updates made to devContEntEndpoint and telEntEndpoint)?

c) Appendix A.1: 
We have updated this line per item #6, but it is now one character too long. Please review and let us know where to insert a line break for the line below:

    "location": "https://example.com/v2/ResourceTypes/EndpointApps”,

d) Appendix B.6: 
Two additional instances of “...:Devices” (plural) appear in this section. Should these instances be updated to “:Device” (singular) as well?

We will request that IANA make their relevant changes and request AD approval after we receive your remaining updates.

The AUTH48 status page for this document is available here:
https://www.rfc-editor.org/auth48/rfc9944

— FILES (please refresh): —

The updated files have been posted here:
https://www.rfc-editor.org/authors/rfc9944.txt
https://www.rfc-editor.org/authors/rfc9944.pdf
https://www.rfc-editor.org/authors/rfc9944.html
https://www.rfc-editor.org/authors/rfc9944.xml

Diff files showing changes between the last and current version:
https://www.rfc-editor.org/authors/rfc9944-lastdiff.html
https://www.rfc-editor.org/authors/rfc9944-lastrfcdiff.html (side by side)

Diff files showing changes made during AUTH48:
https://www.rfc-editor.org/authors/rfc9944-auth48diff.html
https://www.rfc-editor.org/authors/rfc9944-auth48rfcdiff.html (side by side)

Diff files showing all changes:
https://www.rfc-editor.org/authors/rfc9944-diff.html
https://www.rfc-editor.org/authors/rfc9944-rfcdiff.html (side by side)

All best,

Kaelin Foody
RFC Production Center

> On Apr 7, 2026, at 1:45 PM, Eliot Lear <lear@cisco.com> wrote:
> 
> Hi Kaelin
> 
> Hassan identified a number of typos and omissions in his review.  Some of these will need IANA review, as there are several entries missing.  All of these, I think, are non-controversial edits.
> 
> There is one exception that we will come back to after this one.  It’s not that it’s controversial, but it is a substantive change.
> 
> Eliot
> 1. Section 7.4.1, Figure 10 (FDO Example) — schema URIs in JSON
> OLD: urn:ietf:params:scim:schemas:core:2.0:Devices and urn:ietf:params:scim:schemas:extension:fido-device-onboard:2.0:Devices
> NEW: urn:ietf:params:scim:schemas:core:2.0:Device and urn:ietf:params:scim:schemas:extension:fido-device-onboard:2.0:Device
> 2. Appendix A.7, FDO Extension JSON Schema — id and meta.location use plural "Devices"
> OLD: "id": "urn:ietf:params:scim:schemas:extension:fido-device-onboard:2.0:Devices" and "location": "...fido-device-onboard:2.0:Devices"
> NEW: "id": "urn:ietf:params:scim:schemas:extension:fido-device-onboard:2.0:Device" and "location": "...fido-device-onboard:2.0:Device"
> 3. Section 7.5.1, Zigbee deviceEui64Address description
> OLD: "takes the same form as the deviceMACaddress"
> NEW: "takes the same form as the deviceMacAddress "
> 4. Section 7.6.2, description of $ref attribute
> OLD: "EndointApp"
> NEW: "EndpointApp"
> 5. Appendix A.1, Resource Schema — EndpointApp endpoint path
> OLD: "endpoint": "/EndpointApp"
> NEW: "endpoint": "/EndpointApps" 6. OLD: "location": "https://example.com/v2/ResourceTypes/EndpointApp",
> NEW: "location": "https://example.com/v2/ResourceTypes/EndpointApps", 7. Appendix A.3, EndpointApp Schema meta.location
> OLD: "/v2/Schemas/urn:ietf:params:scim:schemas:core:2.0:Device"
> NEW: "/v2/Schemas/urn:ietf:params:scim:schemas:core:2.0:EndpointApp" 8. Appendix A.4, in schema with ID "urn:ietf:params:scim:schemas:extension:pairingOOB:2.0:Device",
> OLD: "description": "Passkey pairing method for BLE."
> NEW: "description": "Out-of-band pairing method for BLE."
> 9. Appendix A.4, BLE Extension JSON Schema — mobility type
> OLD: "type": "bool"
> NEW: "type": "boolean"
> 10. [We’ll come back to this one]
> 11. Section 6.3.1, Table 2 — clientToken Return column
> OLD: Return = N
> New: Return = Def
> 12. Section 7.1.3, Table 3 — isRandom Required column
> OLD: Req = T
> NEW: Req = F
> 13. Section 7.2.1, prose description of bootstrapKey
> OLD: "This attribute is required, case sensitive, mutable, and returned by default."
> NEW: "This attribute is required, case sensitive, write only, and never returned."
> 14. Section 9.2, IANA registrations for BLE pairing method extensions (pairingNull) — missing entry
> NEW:
> Schema URI: urn:ietf:params:scim:schemas:extension:pairingNull:2.0:Device
> Name: Pairing Null
> Resource Type: Device
> Reference: RFC 9944, Section 7.1.3
> 15. Section 9.2, IANA registrations for Zigbee — missing entry
> NEW:
> Schema URI: urn:ietf:params:scim:schemas:extension:zigbee:2.0:Device
> Name: Zigbee
> Resource Type: Device
> Reference: RFC 9944, Section 7.5
> 16. Section 9.2, IANA registration for urn:ietf:params:scim:schemas:extension:endpointAppsExt:2.0:Device — Reference
> OLD: RFC 9944, Section 7.1.3
> NEW: RFC 9944, Section 7.6
> 17. Appendix A.4, BLE Extension JSON Schema — irk mutability and returned fields
> OLD: "mutability": "readWrite", "returned": "default"
> NEW: "mutability": "writeOnly", "returned": "never"
> 18. Appendix A.4, pairingJustWorks schema — key attribute
> OLD: "required": true
> NEW: "required": false
> 19. Appendix A.7, FDO Extension JSON Schema — fdoVoucher mutability and returned fields
> OLD: "mutability": "readWrite", "returned": "default"
> NEW: "mutability": "writeOnly", "returned": "never"
> 0a. Section 6.3.1, Table 2 —  clientToken
> For applicationType:
> OLD: Mutable = R
> NEW: Mutable = RO
> 20b. Section 6.2, prose description of applicationType
> OLD: "The attribute is required and is not case sensitive. The attribute is readOnly and should be returned by default."
> NEW: "The attribute is required and is not case sensitive. The attribute is immutable and should be returned by default."
> 20c. Section 6.3.1, Table 2 — applicationType Mutable column
> OLD: Mutable = R
> NEW: Mutable = Imm
> 21. Section 7.6.2, Table 8 — devContEntEndpoint and telEntEndpoint 
> For devContEntEndpoint: 
> OLD: Mutable = R
> NEW: Mutable = RO
> For telEntEndpoint: 
> OLD: Mutable = R
> NEW: Mutable = RO
> 22. Section 7.6.1, prose description of deviceControlEnterpriseEndpoint
> OLD: "This attribute is required, case sensitive, mutable, and returned by default."
> NEW: "This attribute is required, case sensitive, read-only, and returned by default."
> 23. Section 7.6.1, prose description of telemetryEnterpriseEndpoint
> OLD: "This attribute is optional, case sensitive, mutable, and returned by default."
> NEW: "This attribute is optional, case sensitive, read-only, and returned by default."
> 24. Section 7.6.2, Table 8 — $ref
> OLD: $ref row Case Exact = F
> NEW: $ref row Case Exact = T
> 25. Appendix A.5, DPP Extension Schema — bootstrapKey
> OLD: "mutability": "readWrite", "returned": "default"
> NEW: "mutability": "writeOnly", "returned": "never"
> 26. [We’ll come back to this one]
> 27. [deleted]
> 28. Section 6.3.1, Table 2 — missing groups attribute row
> OLD: (no groups row in Table 2)
> NEW: Add row groups | T | F | T | RO | Def | n/a
> 29. Appendix A.9, endpointAppsExt Extension Schema — $ref sub-attribute required
> OLD: "required": false
> NEW: "required": true
> 30. Section 7.1.3, prose — incorrect cross-reference to Section 6.1
> OLD: "Each extension contains the common attributes in Section 6.1."
> NEW: "Each extension contains the common attributes in Section 2.1."
>