Re: [scim] device model and scope

"Liuchunchi(Peter)" <liuchunchi@huawei.com> Thu, 28 March 2024 09:00 UTC

Return-Path: <liuchunchi@huawei.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15BE6C14F6A4 for <scim@ietfa.amsl.com>; Thu, 28 Mar 2024 02:00:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id spQImI7bRnsO for <scim@ietfa.amsl.com>; Thu, 28 Mar 2024 02:00:01 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2DDF0C14F5E4 for <scim@ietf.org>; Thu, 28 Mar 2024 02:00:01 -0700 (PDT)
Received: from mail.maildlp.com (unknown [172.18.186.216]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4V4yBm3Pjzz6D8Yj; Thu, 28 Mar 2024 16:58:56 +0800 (CST)
Received: from lhrpeml500002.china.huawei.com (unknown [7.191.160.78]) by mail.maildlp.com (Postfix) with ESMTPS id 158FF140B2F; Thu, 28 Mar 2024 16:59:58 +0800 (CST)
Received: from canpemm100006.china.huawei.com (7.192.104.17) by lhrpeml500002.china.huawei.com (7.191.160.78) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.35; Thu, 28 Mar 2024 08:59:57 +0000
Received: from dggpeml500018.china.huawei.com (7.185.36.186) by canpemm100006.china.huawei.com (7.192.104.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.35; Thu, 28 Mar 2024 16:59:54 +0800
Received: from dggpeml500018.china.huawei.com ([7.185.36.186]) by dggpeml500018.china.huawei.com ([7.185.36.186]) with mapi id 15.01.2507.035; Thu, 28 Mar 2024 16:59:54 +0800
From: "Liuchunchi(Peter)" <liuchunchi@huawei.com>
To: Eliot Lear <lear@lear.ch>, SCIM WG <scim@ietf.org>
CC: "danny.zollner@microsoft.com" <danny.zollner@microsoft.com>
Thread-Topic: [scim] device model and scope
Thread-Index: AQJVTJ93x0pEg7d8qajZiVnInxkAHLBXPQwQ
Date: Thu, 28 Mar 2024 08:59:54 +0000
Message-ID: <b5164bd00b6f4cca9d641dc8065da9de@huawei.com>
References: <b9ec2e9c-18f7-8827-0da1-2f73cc12ba18@lear.ch>
In-Reply-To: <b9ec2e9c-18f7-8827-0da1-2f73cc12ba18@lear.ch>
Accept-Language: en-US, zh-CN
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.138.39.60]
Content-Type: multipart/alternative; boundary="_000_b5164bd00b6f4cca9d641dc8065da9dehuaweicom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/3usL7N1FtD0SZKGDnxLfcm3PgLs>
Subject: Re: [scim] device model and scope
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Mar 2024 09:00:03 -0000

Hello Elliot,

Sorry for necrobumping such an old thread. But this non-IOT use case/device model was discussed during Brisbane scim wg meeting and I am not sure if I understood correctly.

Can you suggest a few more specific instances of such non-IOT devices?

Best,
Peter

From: Eliot Lear <lear@lear.ch>
Sent: Sunday, August 20, 2023 5:43 PM
To: SCIM WG <scim@ietf.org>
Cc: danny.zollner@microsoft.com
Subject: [scim] device model and scope


During the f2f meeting (in which my face was on a screen ;-) I think it was Danny who suggested that the device model needs to be expanded to handle the non-IOT use case.  That's a nice meaty topic to take on, so let's start going there.

I had suggested one of two paths: either incorporate some changes to cover that use case, or separate out two models.  The basis for the choice, I think, is commonality.  If there is substantial overlap, then either incorporating additional elements, or creating a standard extension, might be a way to go.

"IOT" is one of those nebulous things, and can sometimes get in the way.  Right now, I could imagine some additional elements for “non-IOT”, which I'll take to mean computers that humans use that have no or limited direct cyber-physical capabilities.  Some of those might include an owner, some policy elements, VPN parameters, etc.  One could imagine the SCIM model reaching all the way into MDM parameters.  But that's just me imagining things without a good understanding of what Danny had in mind.

What I propose is that we get into a discussion about this, and see how far we can get before Prague.  I think the next step, though, is to understand what the new objects/elements would be.

Thoughts?

Eliot