[scim] [Errata Held for Document Update] RFC7644 (8367)

[RFC Errata System <[e-mail]>]

The following errata report has been held for document update 
for RFC7644, "System for Cross-domain Identity Management: Protocol". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid8367

--------------------------------------
Status: Held for Document Update
Type: Technical

Reported by: Matthias Winter <[e-mail]>
Date Reported: 2025-04-01
Held by: Deb Cooley (IESG)

Section: 3.4.1

Original Text
-------------
3.4.1.  Retrieving a Known Resource

   To retrieve a known resource, clients send GET requests to the
   resource endpoint, e.g., "/Users/{id}", "/Groups/{id}", or
   "/Schemas/{id}", where "{id}" is a resource identifier (for example,
   the value of the "id" attribute).

Corrected Text
--------------
3.4.1.  Retrieving a Known Resource

   To retrieve a known resource, clients send GET requests to the
   resource endpoint, e.g., "/Users/{id}", "/Groups/{id}", or
   "/Schemas/{id}", where "{id}" is the value of the "id" attribute
   of the resource.

Notes
-----
The change clearifies that "{id}" is the value of the "id" attribute.

In the original text, the value of the "id" attribute is only mentioned as an example. It remains unclear if the value of the "id" attribute always is a "resource identifier" or if there may be exceptions. It also remains unclear, which other attribute values are considered "resource identifiers", e.g. the values of "externalId", "userName" for User resources, "name" for Resource Type resources, and so on.

RFC6743 specifies for example:
* "id" as "A unique identifier for a SCIM resource" (section 3.1)
* "externalId" as "identifier for the resource" (section 3.1)
* "userName" as "unique identifier for the user" (section 4.1.1)
But as a client I would rather not expect a GET call on "/Users/{userName}" or "/Users/{externalId}" to work. It is also unclear which object would be returned if the "{externalId}" or "{userName}" matches the "{id}" of a different user.

--------------------------------------
RFC7644 (draft-ietf-scim-api-19)
--------------------------------------
Title               : System for Cross-domain Identity Management: Protocol
Publication Date    : September 2015
Author(s)           : P. Hunt, Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C. Mortimore
Category            : PROPOSED STANDARD
Source              : System for Cross-domain Identity Management
Stream              : IETF
Verifying Party     : IESG