From nobody Wed Jul  6 19:51:37 2022
Return-Path: <Danny.Zollner@microsoft.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
 by ietfa.amsl.com (Postfix) with ESMTP id 17299C15AD30
 for <scim@ietfa.amsl.com>; Wed,  6 Jul 2022 19:51:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.751
X-Spam-Level: 
X-Spam-Status: No, score=-2.751 tagged_above=-999 required=5
 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.745, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1,
 RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001,
 URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001]
 autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key)
 header.d=microsoft.com
Received: from mail.ietf.org ([50.223.129.194])
 by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 43BxSttzuKfl for <scim@ietfa.amsl.com>;
 Wed,  6 Jul 2022 19:51:33 -0700 (PDT)
Received: from na01-obe.outbound.protection.outlook.com
 (mail-eastus2azlp170110002.outbound.protection.outlook.com
 [IPv6:2a01:111:f403:c110::2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by ietfa.amsl.com (Postfix) with ESMTPS id DA64CC157B3B
 for <scim@ietf.org>; Wed,  6 Jul 2022 19:51:32 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=UCVC4ae1jE3kxI8W6wg+LsbHtga0PjWs3FCKZYzyOcbstywTVCmSaMcg5djnmg2Lnbh8on+uUiaN04lXoEHMc0mEtaI5BkBimiS7i7y7yzpaNKZzsWA+8WyNlwgB2n/YcUJ3pOubc1ZhegiMo23D7f9XkR+Xk+dxbPJLoQW6Hq6CqUCxs256qyr1gAXaI55m5SK21Om93e6Hli6U9vGByK0XjdqO7s1LaofFfZLGpjBloHML5JptKC0ep9OWsfzDWicCnMT3Xy/vC/MMXLvs+nOFiYzb8gLhRO3kXuWo5EAqvmRlqfq1GdvqjFcpMzFNK9cCUl66ZhOZzzPAMJiDoA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; 
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=MP7jMdBOYrFUeaXZC0FmXUKTwax6FduRYHWloPmPwgE=;
 b=DCW0pq1H8ni2feEhsy0wl+sXNVYaTErexNNwSTRSPznwfMbj2JeVcpti24X9hNt+pca7lXE1/tMQweXRS4anh0mRF5pGviV+E+co7cg1G/WUfB0PwQ/1OfgzemJzEc6LImA6YdkOWZ8jT14jcJFEsS9uBexuE15YrpzOeSva/TLSv/7FHpO3b4ZpobNtN1ZSYVG3YFTRfUG7+VkvWsGEvNjRIJmWKyc+UwtBX7Te59XIP3JAJUlAPY5Fm5I4OdQpxmmB8xtXOK3PYBT8Vkm0AiuVeNQ25op4cbHQNY2YeJNeuZB85OTNSz30Xg3NNqvPHm54h7s7M12xTQW198l25g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
 smtp.mailfrom=microsoft.com; dmarc=pass action=none
 header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=selector2;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=MP7jMdBOYrFUeaXZC0FmXUKTwax6FduRYHWloPmPwgE=;
 b=M/PTzyRHUoMQBoLMUxaBwcBWHRvfWCGPswLx2ysU5PJEpW0bQUIuDFtWJ8uRdsLNyiaezMPiViEAWJd/2RysEwYwPBGtfrFtSIAGm2+b8TO4I2ulSvDjOMxFTs4a9Yv9kolmXG1iV26uL+Rc5SGI9FCWkE8JXTDEceW4YeF0huI=
Received: from MN2PR00MB0718.namprd00.prod.outlook.com (2603:10b6:208:1de::9)
 by SA1PR00MB1137.namprd00.prod.outlook.com (2603:10b6:806:1ac::14)
 with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5457.0; Thu, 7 Jul
 2022 02:51:29 +0000
Received: from MN2PR00MB0718.namprd00.prod.outlook.com
 ([fe80::592:f69b:e6ec:a55d]) by MN2PR00MB0718.namprd00.prod.outlook.com
 ([fe80::592:f69b:e6ec:a55d%5]) with mapi id 15.20.5456.000; Thu, 7 Jul 2022
 02:51:28 +0000
From: Danny Zollner <Danny.Zollner@microsoft.com>
To: Julien Schneider <julien@audriga.com>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [EXTERNAL] [scim] Query on a specific known resource
Thread-Index: AQHYkRRp4rTYRjkmrUu4U3iBXVuWP61yNIag
Date: Thu, 7 Jul 2022 02:51:28 +0000
Message-ID: <MN2PR00MB07189D4A9DA54A11131E9896FF839@MN2PR00MB0718.namprd00.prod.outlook.com>
References: <bc9c53f8-82fd-57e9-8fe0-166e91048d6b@audriga.com>
In-Reply-To: <bc9c53f8-82fd-57e9-8fe0-166e91048d6b@audriga.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true;
 MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2022-07-07T02:51:26Z; 
 MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard;
 MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal;
 MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
 MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=08b8c8ab-b1a7-43c1-89a0-b9f3c8053250;
 MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0
authentication-results: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=microsoft.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 2973acc1-b14a-4b31-a06c-08da5fc3975a
x-ms-traffictypediagnostic: SA1PR00MB1137:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; 
 IPV:NLI; SFV:NSPM;
 H:MN2PR00MB0718.namprd00.prod.outlook.com; PTR:; CAT:NONE; 
 SFS:(13230016)(4636009)(396003)(136003)(346002)(376002)(366004)(39860400002)(451199009)(110136005)(9326002)(52536014)(8936002)(64756008)(66446008)(66476007)(5660300002)(66946007)(66556008)(316002)(86362001)(76116006)(38100700002)(41300700001)(166002)(6506007)(9686003)(8676002)(7696005)(71200400001)(10290500003)(53546011)(122000001)(66574015)(82950400001)(478600001)(966005)(38070700005)(33656002)(8990500004)(82960400001)(2906002)(55016003)(83380400001)(186003);
 DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?3+RotbV32uIx29Vejqj2gptFYcZ3aMEErD2tOnsM9ktwaKorcQ/enjfNNJ?=
 =?iso-8859-1?Q?5Vyk3GueyY7JejxUwpuJkKZY+N1TEGANjh852K6AQEkcz+MFBlH+xbzliY?=
 =?iso-8859-1?Q?rbiYycg+Z7I72Gwj1oJeW73Jh0bkW42Vrq1BicxvceBgYLDHmNoeaidYwj?=
 =?iso-8859-1?Q?+Y+J3TJ5+ySBJAy2WmR+7aH14unTS5k/z1foFd+hZnsaN3v9dHWZGpVC3m?=
 =?iso-8859-1?Q?u3laEZkEhN5bLQLSXhOBljo17z0T80+qfMJo/SKRpuuOLPwe9m41WH/K7Y?=
 =?iso-8859-1?Q?qE2fWI3gjniBxzPjsbhsyeyOoyl+UrQHUffYZRS1guH5lsjm8AKQgem1CF?=
 =?iso-8859-1?Q?OQQj93Y1RgSWWrQ075WBKdv7vCPpt+H0QxlaHfW99AOuXataaqM2qu0+re?=
 =?iso-8859-1?Q?SqyG8AWqFo1yGUvWHt9kKDxQBcCEvRx+DTmNZrc9UiLPMsB3filrjTfgOg?=
 =?iso-8859-1?Q?WXhhD1d4WS01DIOZoKvXEkiDaK5/T/DDZ74exEl5t6X47OUMSk5TwHUdUl?=
 =?iso-8859-1?Q?S/Ybs0kF9aQo3UMt/6WG+jeqqwi7bBVDLuSJj0/7JSn7YwNaWqMNLd4h/E?=
 =?iso-8859-1?Q?FudPqRfxhsBcbjIwAZhDgjhlDNdiUQa31TVm2QX18qcVn9iyZsftD1cInP?=
 =?iso-8859-1?Q?hMtJWOh9Jnc/9sStD/pEsEWroUmpV4FnZfvWQB8Dmrrhj9yQc8aQtt5D1l?=
 =?iso-8859-1?Q?TsfCexv9SR7qfvxBU5gKMMUBZLxsC9OU1d4zanGI4SXxZgdHEgyBwOv6iS?=
 =?iso-8859-1?Q?3hWPr4WmzskTQpB6cNfrSxOSm+Unoo8OqfxhV+qR4X/VFcVm/9KQSWyFBa?=
 =?iso-8859-1?Q?bx6AOzKFc1nZ8I/Vs1rELtPT+hIGhrIRoLr4eYPAreEHgMbKAsYEtKjE4x?=
 =?iso-8859-1?Q?b0o1+XoZsWctRelGNtPN0QJTSXk+gTV+yQD4qJWBQk6+fEMp2Dv/xXtJoY?=
 =?iso-8859-1?Q?5KeDgCFT9rauSFAGdEM/f2/R2A3o8ATJYb7jsAkxY5BwIeZFTvtH/KM/0S?=
 =?iso-8859-1?Q?WxpPoLNtsatvXBHDriDG5xMy7jjL/XhSgBSUxthafuBt7zjQyzLvi+h8P8?=
 =?iso-8859-1?Q?XRxJ2FeZcKJGhkHoJOEBiA/f/iPuQlNf5VM8e/6HKQ6mRqnm3vapaZWmax?=
 =?iso-8859-1?Q?RpxZ0lGMvChwLDV57h4koPYrYU5KFoyoI9NrAxS9A1rAkPbDr9LxU6a7SN?=
 =?iso-8859-1?Q?LOJ49lqZUxaLz8n3GvCsQA0Cxhh9oElBDICqkgtciEKfQPKHBWJwEW0K6J?=
 =?iso-8859-1?Q?8fagaTL3bkqe0HdCyq2wmFLpnnmvzy3UAq0nTowD6PThKntY+mawoWHfwK?=
 =?iso-8859-1?Q?tap/EKavmwUmIRwruu/xh1c4Dw19SDc72NlRuDadcE41GD3YZdOmPAPrI1?=
 =?iso-8859-1?Q?bVHn2yV06wmEX/9TM+SmqMxmHGCZUvECOBEwfcfhTRLNYKuVNME2WTGg95?=
 =?iso-8859-1?Q?V+TLOVHVmhEueBMmtqWG4vV7bxeQYt5rQuNAZp+7XwQ7f6ir8sh9Fm6bEp?=
 =?iso-8859-1?Q?Ny3k6fyZwySEbFJlBlJ5soWUnl9kYvDa4FIaoU1E6xJL499CRH2T57X5iI?=
 =?iso-8859-1?Q?4jOVNsoxm45KqaGiEaKZoMdXpd7okB4OGhY6CEVdPk1AtnZlva+0ybPw1N?=
 =?iso-8859-1?Q?6mYvVgKlI+bwQi4tK1Pp0x3JLpbFuGL99wpBeA+MC4E8I4lV/RUeP/dyVM?=
 =?iso-8859-1?Q?vp/eEpXWBfK8JAOrBogZWHVyoxghrSQW676DOTwI?=
Content-Type: multipart/alternative;
 boundary="_000_MN2PR00MB07189D4A9DA54A11131E9896FF839MN2PR00MB0718namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR00MB0718.namprd00.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2973acc1-b14a-4b31-a06c-08da5fc3975a
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jul 2022 02:51:28.8438 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Zm9gpGinKegCNZhiEfbfnHP1pE0Snxw6I8DTIGPb1ZmWx90S+VInoOerMD4UvbPu1PUycuPumm+VPWg/odBu5Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR00MB1137
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/Ijzj3HtIlFTQg0QIgOUbeQZzbmI>
Subject: Re: [scim] [EXTERNAL]  Query on a specific known resource
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>,
 <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>,
 <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Jul 2022 02:51:37 -0000

--_000_MN2PR00MB07189D4A9DA54A11131E9896FF839MN2PR00MB0718namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Julien,

RFC 7644 section 3.4.2 specifically is talking about queries. Retrieving or=
 modifying known resources (i.e.: GET /Users/12345 ) does not require a Lis=
tResponse type response. A query of GET /Users?filter=3Ddisplayname contain=
s "contoso.com" or GET /Users?attributes=3DuserName would require a ListRes=
ponse type response, as it does not identify a specific resource in the que=
ry URL via ID value (i.e.: "12345" in the previous example). On the other h=
and, GET /Users/12345?attributes=3DuserName does not require the ListRespon=
se type response as it does identify a specific resource.

To explicitly answer the final question in your email - the expected respon=
se to GET /Users/2819c223-7f76-453a-919d-413861904646?attributes=3DuserName=
 would be the second example you provided.

Cheers,

Danny Zollner

From: scim <scim-bounces@ietf.org> On Behalf Of Julien Schneider
Sent: Wednesday, July 6, 2022 3:41 AM
To: scim@ietf.org
Subject: [EXTERNAL] [scim] Query on a specific known resource

Some people who received this message don't often get email from julien@aud=
riga.com<mailto:julien@audriga.com>. Learn why this is important<https://ak=
a.ms/LearnAboutSenderIdentification>
Hi all,

I have a question about queries performed against a SCIM resource object (l=
ike "/Users/{id}").

The RFC (https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2<https:=
//nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatracker.i=
etf.org%2Fdoc%2Fhtml%2Frfc7644%23section-3.4.2&data=3D05%7C01%7Cdanny.zolln=
er%40microsoft.com%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86f141af91a=
b2d7cd011db47%7C1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi=
MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&=
sdata=3DfVtTna44Hr973Z79OsTegu9U9%2FpDwRcBZignfi5Eluk%3D&reserved=3D0>) sta=
tes:

Responses MUST be identified using the following URI:

   "urn:ietf:params:scim:api:messages:2.0:ListResponse"

If I understand correctly, that means the "schemas" parameter of the respon=
se to those queries must be set to:

"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"]

While I understand how that applies to queries on a resource type endpoint =
(like "/Users") or on the SCIM server root, I don't understand how that app=
lies to queries on a specific resource object.
If I understand correctly, queries on a specific resource object actually a=
re quite identical to "retrieving a known resource" (https://datatracker.ie=
tf.org/doc/html/rfc7644#section-3.4.1<https://nam06.safelinks.protection.ou=
tlook.com/?url=3Dhttps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Frfc7644%=
23section-3.4.1&data=3D05%7C01%7Cdanny.zollner%40microsoft.com%7C29270780ce=
9941a0687808da5f2b53db%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C6379269=
37860837552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJ=
BTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=3DDQEZdlY7XBONxFIegf1SCJf=
pdjpDdWzBvh5%2FzB%2B2EpQ%3D&reserved=3D0>) which are a GET on a specific re=
source, like:

GET /Users/2819c223-7f76-453a-919d-413861904646
Responses to those requests should have the "schemas" parameter set to the =
resource schema(s):

{

     "schemas":["urn:ietf:params:scim:schemas:core:2.0:User"],

     "id":"2819c223-7f76-453a-919d-413861904646",

...

}

Now, how should the response to the following query should look like? And t=
o what value should the "schemas" parameter of the response be set?

GET /Users/2819c223-7f76-453a-919d-413861904646?attributes=3DuserName

Should it be:

   {

     "schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],

     "totalResults":1,

     "Resources":[

       {

         "id":"2819c223-7f76-453a-919d-413861904646",

         "userName":"bjensen"

       }

     ]

   }

Or something like:

   {

     "schemas":["urn:ietf:params:scim:schemas:core:2.0:User"],

     "id":"2819c223-7f76-453a-919d-413861904646",

     "meta":{

       "resourceType":"User",

       "created":"2011-08-01T18:29:49.793Z",

       "lastModified":"2011-08-01T18:29:49.793Z",

       "location":

   "https://example.com/v2/Users/2819c223-7f76-453a-919d-413861904646"<http=
s://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fexample.com=
%2Fv2%2FUsers%2F2819c223-7f76-453a-919d-413861904646&data=3D05%7C01%7Cdanny=
.zollner%40microsoft.com%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86f14=
1af91ab2d7cd011db47%7C1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d8ey=
JWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%=
7C%7C&sdata=3DHRI2UjMUWpVqb0IzoOcpDNA%2FVVDBG3lZ4gU6C60Gr1I%3D&reserved=3D0=
>,

       "version":"W\/\"f250dd84f0671c3\""

     },

     "userName":"bjensen"

   }

Thanks a lot in advance


--

Julien Schneider

Tel: +49 721 170293 16

Fax: +49 721 170293 179



http://www.audriga.com<https://nam06.safelinks.protection.outlook.com/?url=
=3Dhttp%3A%2F%2Fwww.audriga.com%2F&data=3D05%7C01%7Cdanny.zollner%40microso=
ft.com%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86f141af91ab2d7cd011db4=
7%7C1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAi=
LCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=3D37nD=
JF0vyrffA22bld7R3WHNu11PnoLTmWCne%2FGCios%3D&reserved=3D0> | http://www.twi=
tter.com/audriga<https://nam06.safelinks.protection.outlook.com/?url=3Dhttp=
%3A%2F%2Fwww.twitter.com%2Faudriga&data=3D05%7C01%7Cdanny.zollner%40microso=
ft.com%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86f141af91ab2d7cd011db4=
7%7C1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAi=
LCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=3DP5As=
3bPNzRa4zSXSdYj9%2BirwGEkk6%2BYy5jkVKNAQnYw%3D&reserved=3D0>



--------------------------------------------------------------------------

audriga GmbH |  Alter Schlachthof 57  | 76137 Karlsruhe

Sitz der Gesellschaft: Karlsruhe - Amtsgericht Mannheim - HRB 713034

Gesch=E4ftsf=FChrer: Dr. Frank Dengler, Dr.-Ing. Hans-J=F6rg Happel

--------------------------------------------------------------------------

--_000_MN2PR00MB07189D4A9DA54A11131E9896FF839MN2PR00MB0718namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:"Yu Gothic";
	panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
	{font-family:"\@Yu Gothic";
	panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
	{font-family:wf_segoe-ui_normal;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;}
span.EmailStyle21
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple" style=3D"word-wrap:brea=
k-word">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Hi Julien,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">RFC 7644 section 3.4.2 specifically is talking about=
 queries. Retrieving or modifying known resources (i.e.: GET /Users/12345 )=
 does not require a ListResponse type response. A query of
<b>GET /Users?filter=3Ddisplayname contains &#8220;contoso.com&#8221;</b> o=
r <b>GET /Users?attributes=3DuserName</b> would require a ListResponse type=
 response, as it does not identify a specific resource in the query URL via=
 ID value (i.e.: &#8220;12345&#8221; in the previous example).
 On the other hand, <b>GET /Users/12345?attributes=3DuserName </b>does not =
require the ListResponse type response as it does identify a specific resou=
rce.
<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">To explicitly answer the final question in your emai=
l &#8211; the expected response to
<b>GET /Users/2819c223-7f76-453a-919d-413861904646?attributes=3DuserName</b=
> would be the second example you provided.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Cheers,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Danny Zollner<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b>From:</b> scim &lt;scim-bounces@ietf.org&gt; <b>O=
n Behalf Of </b>
Julien Schneider<br>
<b>Sent:</b> Wednesday, July 6, 2022 3:41 AM<br>
<b>To:</b> scim@ietf.org<br>
<b>Subject:</b> [EXTERNAL] [scim] Query on a specific known resource<o:p></=
o:p></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0" align=3D"left" width=3D"100%" style=3D"width:100.0%">
<tbody>
<tr>
<td style=3D"background:#A6A6A6;padding:5.25pt 1.5pt 5.25pt 1.5pt"></td>
<td width=3D"100%" style=3D"width:100.0%;background:#EAEAEA;padding:5.25pt =
3.75pt 5.25pt 11.25pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-element:frame;mso-element-frame-hspace:=
2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-el=
ement-anchor-horizontal:column;mso-height-rule:exactly">
<span style=3D"font-size:9.0pt;font-family:wf_segoe-ui_normal;color:#212121=
">Some people who received this message don't often get email from
<a href=3D"mailto:julien@audriga.com">julien@audriga.com</a>. <a href=3D"ht=
tps://aka.ms/LearnAboutSenderIdentification">
Learn why this is important</a><o:p></o:p></span></p>
</div>
</td>
<td width=3D"75" style=3D"width:56.25pt;background:#EAEAEA;padding:5.25pt 3=
.75pt 5.25pt 3.75pt;align:left">
</td>
</tr>
</tbody>
</table>
<div>
<p class=3D"MsoNormal">Hi all,<br>
<br>
I have a question about queries performed against a SCIM resource object (l=
ike &quot;/Users/{id}&quot;).<br>
<br>
The RFC (<a href=3D"https://nam06.safelinks.protection.outlook.com/?url=3Dh=
ttps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Frfc7644%23section-3.4.2&am=
p;data=3D05%7C01%7Cdanny.zollner%40microsoft.com%7C29270780ce9941a0687808da=
5f2b53db%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637926937860837552%7C=
Unknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiL=
CJXVCI6Mn0%3D%7C2000%7C%7C%7C&amp;sdata=3DfVtTna44Hr973Z79OsTegu9U9%2FpDwRc=
BZignfi5Eluk%3D&amp;reserved=3D0">https://datatracker.ietf.org/doc/html/rfc=
7644#section-3.4.2</a>)
 states: <o:p></o:p></p>
<pre>Responses MUST be identified using the following URI:<o:p></o:p></pre>
<pre>&nbsp;&nbsp; &quot;urn:ietf:params:scim:api:messages:2.0:ListResponse&=
quot;<o:p></o:p></pre>
<p class=3D"MsoNormal"><br>
If I understand correctly, that means the &quot;schemas&quot; parameter of =
the response to those queries must be set to:
<o:p></o:p></p>
<pre>&quot;schemas&quot;:[&quot;urn:ietf:params:scim:api:messages:2.0:ListR=
esponse&quot;]<o:p></o:p></pre>
<p class=3D"MsoNormal"><br>
While I understand how that applies to queries on a resource type endpoint =
(like &quot;/Users&quot;) or on the SCIM server root, I don't understand ho=
w that applies to queries on a specific resource object.<br>
If I understand correctly, queries on a specific resource object actually a=
re quite identical to &quot;retrieving a known resource&quot; (<a href=3D"h=
ttps://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatrac=
ker.ietf.org%2Fdoc%2Fhtml%2Frfc7644%23section-3.4.1&amp;data=3D05%7C01%7Cda=
nny.zollner%40microsoft.com%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86=
f141af91ab2d7cd011db47%7C1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d=
8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%=
7C%7C%7C&amp;sdata=3DDQEZdlY7XBONxFIegf1SCJfpdjpDdWzBvh5%2FzB%2B2EpQ%3D&amp=
;reserved=3D0">https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.1<=
/a>)
 which are a GET on a specific resource, like:<o:p></o:p></p>
<pre>GET /Users/2819c223-7f76-453a-919d-413861904646<o:p></o:p></pre>
<p class=3D"MsoNormal">Responses to those requests should have the &quot;sc=
hemas&quot; parameter set to the resource schema(s):<o:p></o:p></p>
<pre>{<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;schemas&quot;:[&quot;urn:ietf:params:sc=
im:schemas:core:2.0:User&quot;],<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;id&quot;:&quot;2819c223-7f76-453a-919d-=
413861904646&quot;,<o:p></o:p></pre>
<pre>...<o:p></o:p></pre>
<pre>}<o:p></o:p></pre>
<p class=3D"MsoNormal"><br>
Now, how should the response to the following query should look like? And t=
o what value should the &quot;schemas&quot; parameter of the response be se=
t?<o:p></o:p></p>
<pre>GET /Users/2819c223-7f76-453a-919d-413861904646?attributes=3DuserName<=
o:p></o:p></pre>
<p class=3D"MsoNormal"><br>
Should it be:<o:p></o:p></p>
<pre>&nbsp;&nbsp; {<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;schemas&quot;:[&quot;urn:ietf:params:sc=
im:api:messages:2.0:ListResponse&quot;],<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;totalResults&quot;:1,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;Resources&quot;:[<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;id&quot;:&quot;=
2819c223-7f76-453a-919d-413861904646&quot;,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;userName&quot;:=
&quot;bjensen&quot;<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; ]<o:p></o:p></pre>
<pre>&nbsp;&nbsp; }<o:p></o:p></pre>
<p class=3D"MsoNormal"><br>
Or something like:<o:p></o:p></p>
<pre>&nbsp;&nbsp; {<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;schemas&quot;:[&quot;urn:ietf:params:sc=
im:schemas:core:2.0:User&quot;],<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;id&quot;:&quot;2819c223-7f76-453a-919d-=
413861904646&quot;,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;meta&quot;:{<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;resourceType&quot;:&quot;Us=
er&quot;,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;created&quot;:&quot;2011-08=
-01T18:29:49.793Z&quot;,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;lastModified&quot;:&quot;20=
11-08-01T18:29:49.793Z&quot;,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;location&quot;:<o:p></o:p><=
/pre>
<pre>&nbsp;&nbsp; <a href=3D"https://nam06.safelinks.protection.outlook.com=
/?url=3Dhttps%3A%2F%2Fexample.com%2Fv2%2FUsers%2F2819c223-7f76-453a-919d-41=
3861904646&amp;data=3D05%7C01%7Cdanny.zollner%40microsoft.com%7C29270780ce9=
941a0687808da5f2b53db%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63792693=
7860837552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJB=
TiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&amp;sdata=3DHRI2UjMUWpVqb0IzoOcp=
DNA%2FVVDBG3lZ4gU6C60Gr1I%3D&amp;reserved=3D0">&quot;https://example.com/v2=
/Users/2819c223-7f76-453a-919d-413861904646&quot;</a>,<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;version&quot;:&quot;W\/\&qu=
ot;f250dd84f0671c3\&quot;&quot;<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; },<o:p></o:p></pre>
<pre>&nbsp;&nbsp;&nbsp;&nbsp; &quot;userName&quot;:&quot;bjensen&quot;<o:p>=
</o:p></pre>
<pre>&nbsp;&nbsp; }<o:p></o:p></pre>
<p class=3D"MsoNormal"><br>
Thanks a lot in advance<br>
<br>
<o:p></o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>Julien Schneider<o:p></o:p></pre>
<pre>Tel: +49 721 170293 16<o:p></o:p></pre>
<pre>Fax: +49 721 170293 179<o:p></o:p></pre>
<pre><o:p>&nbsp;</o:p></pre>
<pre><a href=3D"https://nam06.safelinks.protection.outlook.com/?url=3Dhttp%=
3A%2F%2Fwww.audriga.com%2F&amp;data=3D05%7C01%7Cdanny.zollner%40microsoft.c=
om%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86f141af91ab2d7cd011db47%7C=
1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQ=
IjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&amp;sdata=3D37nD=
JF0vyrffA22bld7R3WHNu11PnoLTmWCne%2FGCios%3D&amp;reserved=3D0">http://www.a=
udriga.com</a> | <a href=3D"https://nam06.safelinks.protection.outlook.com/=
?url=3Dhttp%3A%2F%2Fwww.twitter.com%2Faudriga&amp;data=3D05%7C01%7Cdanny.zo=
llner%40microsoft.com%7C29270780ce9941a0687808da5f2b53db%7C72f988bf86f141af=
91ab2d7cd011db47%7C1%7C0%7C637926937860837552%7CUnknown%7CTWFpbGZsb3d8eyJWI=
joiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%=
7C&amp;sdata=3DP5As3bPNzRa4zSXSdYj9%2BirwGEkk6%2BYy5jkVKNAQnYw%3D&amp;reser=
ved=3D0">http://www.twitter.com/audriga</a><o:p></o:p></pre>
<pre><o:p>&nbsp;</o:p></pre>
<pre>----------------------------------------------------------------------=
----<o:p></o:p></pre>
<pre>audriga GmbH |&nbsp; Alter Schlachthof 57&nbsp; | 76137 Karlsruhe<o:p>=
</o:p></pre>
<pre>Sitz der Gesellschaft: Karlsruhe - Amtsgericht Mannheim - HRB 713034<o=
:p></o:p></pre>
<pre>Gesch=E4ftsf=FChrer: Dr. Frank Dengler, Dr.-Ing. Hans-J=F6rg Happel<o:=
p></o:p></pre>
<pre>----------------------------------------------------------------------=
----<o:p></o:p></pre>
</div>
</div>
</body>
</html>

--_000_MN2PR00MB07189D4A9DA54A11131E9896FF839MN2PR00MB0718namp_--

