Re: [scim] Work Items and Topics - Catalog and Tally

Quint Daenen <quint@elimity.com> Fri, 24 July 2020 10:33 UTC

Return-Path: <quint@elimity.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E40C03A0E92 for <scim@ietfa.amsl.com>; Fri, 24 Jul 2020 03:33:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=elimity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PmLzt5ot8laW for <scim@ietfa.amsl.com>; Fri, 24 Jul 2020 03:33:56 -0700 (PDT)
Received: from mail-vs1-xe2a.google.com (mail-vs1-xe2a.google.com [IPv6:2607:f8b0:4864:20::e2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 364C73A0E91 for <scim@ietf.org>; Fri, 24 Jul 2020 03:33:55 -0700 (PDT)
Received: by mail-vs1-xe2a.google.com with SMTP id a17so4639148vsq.6 for <scim@ietf.org>; Fri, 24 Jul 2020 03:33:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=elimity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ZceF3t89ppY4rPMygitjGheuVWDymUzZJ8IF/chlkF0=; b=Cdr3NSiCb5KMFz4EqSLydkbLiWRaRQYnfLGhHy0I0Tzh6PBCI4+FTzDNJyw24EIqnr aAbTZPz6m/DljG5Hzt+AVmaOdF++hLoQqsl+Ks7McuixK7dC2cDSZGRkbhftm7zVnDWJ WvYF2bHX88qFSb5kij6P9zGH3JPUEle/6hcj+Hsk3UC/BBx1bzeFifwvlrDXi1oh2ES7 SQfLuI/CRB1AKcFzu6netzbUTPUhgJZ4toJJRfENqZpsXfEwtv1MGbJfkfSnLRMsA/z9 UEGb/M6SjnNxFKIO67fWIhriLVmNjXVhlz4NiGirnOYak53qOXQYFBPh3ijAixZ5PYFX 1aEg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ZceF3t89ppY4rPMygitjGheuVWDymUzZJ8IF/chlkF0=; b=KI+QKFR5ktfcD260KBJZwf4lwpaXkczR+5oWiIlkopFUMbc5VP3hjOftnTSk2skMvJ 3ZoUZmCy1cGM9ekIOK6A+OybPfr/2BXnVr1FCk+WBvkpNlEfy1MKVkn+rG2FIGgTvXB3 wt9OfwAHJETJgUT48XecaOCGHkilf6exqNeIuzVLK0dOc5JxEqGZZd5z0FhiMIm4ZGbC V0H6xItI1dfZZB7TlFfTn1XXAIU6LqC1aDwFhYNYFzNMNB6PjecUYRWLHfCENzJl4kg/ 21D2ryIv/yTJ9uLmIU1zxjkdmZsgPrxZtkrga/X0GsKeIbO5dnNH0E4PcCivxkbfVcsb 8ZZg==
X-Gm-Message-State: AOAM533CLJqNhNn7MzL5N8Bt00UW5yg+07ljKGRKhMxS5EImY5WT+nxR p2mTWbDfd+ytqy3AJE/IuoDQCNoPQ1q1ZWDKeGSAQDIyJvD59kLE
X-Google-Smtp-Source: ABdhPJx/mtxGvDDTy+RHl6vTcaB9meIy5yyRMR8kWKa92AJyRaaODO1t4TTcmFEheT3TEutFZoYvEBtiT7AoFOZbW9Y=
X-Received: by 2002:a05:6102:7ac:: with SMTP id x12mr7582238vsg.76.1595586834845; Fri, 24 Jul 2020 03:33:54 -0700 (PDT)
MIME-Version: 1.0
References: <0A1C87DD-A06A-42CF-B77F-A4A524F0C69F@darranrolls.com>
In-Reply-To: <0A1C87DD-A06A-42CF-B77F-A4A524F0C69F@darranrolls.com>
From: Quint Daenen <quint@elimity.com>
Date: Fri, 24 Jul 2020 12:33:43 +0200
Message-ID: <CANUxaEkrT9OMgoZgusSo+t1=MTb-s8sry_Gryx0nhi8zP1HGrw@mail.gmail.com>
To: Darran Rolls <me@darranrolls.com>
Cc: "scim@ietf.org" <scim@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000007fe53505ab2d8213"
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/D-_EyJfEbB3BTG121nUoeeT7PlM>
Subject: Re: [scim] Work Items and Topics - Catalog and Tally
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jul 2020 10:33:59 -0000

Hi all

I am interested in the following items, ordered by personal relevance:
- *4*. Soft Delete
- *8*. Test Suite
- *1* & *2*. Multi-Value Paging and Cursor Pagination
-* 3*. Relying Party User Provisioning

TL;DR
Quint Daenen: Willing to work on items *1-4* and *8*.

---

Most SCIM Servers I have interacted with already use *Soft Delete* 'behind
the scenes'. I guess that it is never a bad idea to avoid potential data
loss? The draft of Morteza Ansari is a good solution to *extend* the
current spec to support this. It would be great to see this integrated with
SCIM.

Today there are various SCIM implementations having their own 'additional'
requirements. Such as a required email address, which is not the case in
the default user schema. It is possible to define your own schema to
enforce this. From my experience it is not that simple to check whether
these implementations are compliant with the SCIM specification. I have
already written some limited test suites. It would be great if a general *Test
Suite* existed that can validate whether a server implementation is
compliant with SCIM. This is all possible since all the needed information
is retrievable from the Service Provider Configuration endpoints.

*Multi-Value Paging* would enhance the current filter possibilities. I
think this is the most complex item in the list. It would make SCIM more
complex, but at the same time more versatile. This would also avoid
overwhelming the client and sp and make the responses cleaner.

The two most used pagination patterns in HTTP-based protocols are: Index
Pagination, and Cursor Pagination. It would be of interest to be able to
support both. If *Cursor Pagination* is already used in another
application, it can be difficult to create a SCIM implementation for it.

*Relying Party User Provisioning* would make the scope of SCIM much bigger.
I do not think SCIM is currently too big or difficult. Yet this would be a
substantial addition to SCIM.

---

Regards
Quint Daenen
LinkedIn <https://www.linkedin.com/in/quint-daenen/> | GitHub
<https://github.com/di-wu>

On Wed, Jul 22, 2020 at 9:57 PM Darran Rolls <me@darranrolls.com> wrote:

> In order to asses interest and commitment to specific topics and work
> items for a refreshed charter, I’ve captured the items discussed so far in
> the following table.  Please do two things 1) Review the list of items and
> let me know if there is other work we should be considering  2) By return
> message indicate the items you are personally interested in and are (more
> importantly) prepared to work on.  You can either send that message to me
> directly or back to this thread on the list.  I’ll then summarize the
> results back to the group.
>
>
>
> I’ll start the process by saying:
>
> Darran Rolls:  Willing to work on items 1-6,7,8
>
>
>
> NOTE:  Time is of the essence.  Assuming we can get a BOF on the calendar
> for IEFT 108 next week, we’ll need this data to make our case for re
> chartering the WG.
>
>
>
> #1
>
> Multi-value Paging
>
> Individual Draft
>
> Phil Hunt
>
> *https://datatracker.ietf.org/doc/draft-hunt-scim-mv-paging/
> <https://datatracker.ietf.org/doc/draft-hunt-scim-mv-paging/>*
>
> #2
>
> Cursor Pagination
>
> Individual Draft
>
> Matt Peterson
>
> *https://tools.ietf.org/html/draft-peterson-scim-cursor-pagination-00
> <https://tools.ietf.org/html/draft-peterson-scim-cursor-pagination-00>*
>
> #3
>
> Relying Party User Provisioning
>
> Individual Draft
>
> Mark Wahl
>
> *https://tools.ietf.org/html/draft-wahl-scim-profile-00
> <https://tools.ietf.org/html/draft-wahl-scim-profile-00>*
>
> #4
>
> Soft Delete
>
> Individual Draft
>
> *Morteza Ansari*
>
> *https://datatracker.ietf.org/doc/draft-ansari-scim-soft-delete/
> <https://datatracker.ietf.org/doc/draft-ansari-scim-soft-delete/>*
>
> #5
>
> New HR Schema
>
> Concept
>
> Matt Domsch
>
>
>
> #6
>
> PAM Schema
>
> Individual Draft
>
> Kelly Grizzle
>
> *https://datatracker.ietf.org/doc/draft-grizzle-scim-pam-ext/
> <https://datatracker.ietf.org/doc/draft-grizzle-scim-pam-ext/>*
>
> #7
>
> Interoperation Considerations
>
> Concept
>
> Darran Rolls
>
>
>
> #8
>
> Developing a Test Suit
>
> Concept
>
> Darran Rolls
>
>
>
>
>
> Thanks
>
>
>
> --
>
> Darran Rolls
>
> https://www.darranrolls.com
>
> LinkedIn <https://www.linkedin.com/in/darran-rolls-068b84> @djrolls
> <https://twitter.com/djrolls>
>
>
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim
>