Re: [scim] Pagination for large ​multi-valued attributes

[Phil Hunt <[e-mail]>]

+1

There is also a practical problem of consistency. Paging in scim is subject to change between requests. 

The group discussed supporting paging with a result set for consistency, but the scale of intended scim usage would become challenging and expensive for most implementers. It also opens the door to DoS attacks because of the resources such calls would consume. 

Then there is the why question. Enumerating large groups raises privacy concerns. This type of action is usually quite limited to things like audit systems. In these cases, because paging is not consistent, it is much better to eat the whole elephant and get all values in one call. 

Phil

> On Feb 7, 2018, at 8:27 AM, Kelly Grizzle <[e-mail]> wrote:
> 
> Hi Alexei – No there is a not a draft or plan to address this currently.  It has been discussed, and the working group decided for now that service providers can use a “returned” value of “request” for large attributes such as this.  This prevents the full value from being returned on most calls, but does not give a great solution if you want to retrieve the full list.
>  
> Also, this is one of the problems that the PATCH operation is trying to address.  This allows clients to update large attributes (adding or removing values) without having to read the entire attribute.
>  
> --Kelly
>  
> From: scim [mailto:[e-mail]] On Behalf Of Aleksey Chernoraenko
> Sent: Tuesday, February 6, 2018 2:06 PM
> To: [e-mail]
> Subject: [scim] Pagination for large ​multi-valued attributes
>  
> ​​
> Hello,
> 
> SCIM defines "startIndex" and "count" pagination query parameters that allow to control the amount of returned resources.
> 
> SCIM protocol seems to represent pagination only for top level resources (e.g. /Users?startIndex=2&count=10) and does not address pagination for multi-valued attributes, like group membership.
> 
> Are there any plans/draft or recommendations how to handle such use cases?
> 
> ---
> Thank you,
> Alexei
> _______________________________________________
> scim mailing list
> [e-mail]
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_scim&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=85am0fsWIUdt_GtySTbIxdrAiBPR9Uj7m4NCxKasMoU&s=gBOvAbkEpQlYlLgz-Xn119F9mavBadvf5oNyg6fICXI&e=