Re: [scim] group sample not valid for provided schema

Kelly Grizzle <kelly.grizzle@sailpoint.com> Fri, 13 February 2015 14:58 UTC

Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 104FA1A8709 for <scim@ietfa.amsl.com>; Fri, 13 Feb 2015 06:58:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dSzBNIzG_Wyk for <scim@ietfa.amsl.com>; Fri, 13 Feb 2015 06:58:21 -0800 (PST)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0143.outbound.protection.outlook.com [65.55.169.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F42E1A8702 for <scim@ietf.org>; Fri, 13 Feb 2015 06:58:21 -0800 (PST)
Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB390.namprd04.prod.outlook.com (10.141.60.147) with Microsoft SMTP Server (TLS) id 15.1.87.18; Fri, 13 Feb 2015 14:58:17 +0000
Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) with mapi id 15.01.0087.013; Fri, 13 Feb 2015 14:58:17 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Michael Frost <michael.frost@oracle.com>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] group sample not valid for provided schema
Thread-Index: AQHQNr5zfdySVNhHB0K/9LNiWcUVKJztnnyAgAEuuYA=
Date: Fri, 13 Feb 2015 14:58:17 +0000
Message-ID: <BN1PR04MB392553B55AE161D9B4F9C68E2230@BN1PR04MB392.namprd04.prod.outlook.com>
References: <d11dd291-869c-4190-9926-5541e441a34e@default> <515fdd10-1dbc-4ca6-ae9d-2095729dd7cf@default>
In-Reply-To: <515fdd10-1dbc-4ca6-ae9d-2095729dd7cf@default>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-vipre-scanned: 001A0398009286001A04E5
x-originating-ip: [70.114.158.171]
authentication-results: oracle.com; dkim=none (message not signed) header.d=none;
x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390;
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390;
x-forefront-prvs: 0486A0CB86
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(40100003)(92566002)(54356999)(86362001)(76576001)(122556002)(19580405001)(19617315012)(46102003)(76176999)(2950100001)(50986999)(2900100001)(2501002)(19580395003)(16236675004)(33656002)(107886001)(19609705001)(66066001)(19625215002)(106116001)(74316001)(2656002)(15975445007)(102836002)(87936001)(99286002)(62966003)(77156002)(19300405004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB390; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
Content-Type: multipart/alternative; boundary="_000_BN1PR04MB392553B55AE161D9B4F9C68E2230BN1PR04MB392namprd_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Feb 2015 14:58:17.6963 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB390
Archived-At: <http://mailarchive.ietf.org/arch/msg/scim/EH99Gxn-hDluihMNtWLIekuFCs8>
Subject: Re: [scim] group sample not valid for provided schema
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Feb 2015 14:58:25 -0000

Agree on both.  The schema should definitely be fixed.  While technically not required, it would be nice to make the example include a type also.

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost
Sent: Thursday, February 12, 2015 2:54 PM
To: scim@ietf.org
Subject: Re: [scim] group sample not valid for provided schema

Since the barn door is open, shouldn't we fix this one?

-mrf

From: Michael Frost
Sent: Thursday, January 22, 2015 7:41 PM
To: scim@ietf.org<mailto:scim@ietf.org>
Cc: idaas_dev_ww_grp
Subject: [scim] group sample not valid for provided schema

It appears that the schema representation for groups (page 53-54) is missing the "display" sub-attribute definition from the "members" attribute.  This makes the sample group json in section 8.4 (page 31) invalid.  Also the sample in section 8.4 should probably include the optional "type" sub-attribute in "members".



Here is the sample group from page 32

{
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:Group"
  ],
  "id": "e9e30dba-f08f-4109-8486-d5c6a331660a",
  "displayName": "Tour Guides",
  "members": [
    {
      "value": "2819c223-7f76-453a-919d-413861904646",
      "$ref": "https://example.com/v2/Users/2819c223-7f76-453a-919d-413861904646",
      "display": "Babs Jensen"
    },
    {
      "value": "902c246b-6245-4190-8e05-00816be7344a",
      "$ref": "https://example.com/v2/Users/902c246b-6245-4190-8e05-00816be7344a",
      "display": "Mandy Pepperidge"
    }
  ],
  "meta": {
    "resourceType": "Group",
    "created": "2010-01-23T04:56:22Z",
    "lastModified": "2011-05-13T04:42:34Z",
    "version": "W/\"3694e05e9dff592\"",
    "location": "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a331660a"
  }
}


Here is the schema for members, defined sub-attributes are value, $ref, and type

{
  "name": "members",
  "type": "complex",
  "multiValued": true,
  "description": "A list of members of the Group.",
  "required": false,
  "caseExact": false,
  "subAttributes": [
    {
      "name": "value",
      "type": "string",
      "multiValued": false,
      "description": "Identifier of the member of this Group.",
      "required": false,
      "caseExact": false,
      "mutability": "immutable",
      "returned": "default",
      "uniqueness": "none"
    },
    {
      "name": "$ref",
      "type": "string",
      "multiValued": false,
      "description": "The URI of the corresponding to the member resource of this Group.",
      "required": false,
      "caseExact": false,
      "mutability": "immutable",
      "returned": "default",
      "uniqueness": "none"
    },
    {
      "name": "type",
      "type": "string",
      "multiValued": false,
      "description": "A label indicating the type of resource; e.g., 'User' or 'Group'.",
      "required": false,
      "caseExact": false,
      "canonicalValues": [
        "User",
        "Group"
      ],
      "mutability": "immutable",
      "returned": "default",
      "uniqueness": "none"
    }
  ],
  "mutability": "readWrite",
  "returned": "default",
  "uniqueness": "none"
}

-mrf