Re: [scim] User extension for not valid before / after ?

[Phillip Hunt <[e-mail]>]

Danny

Thanks. What has not been clear to me is how “privacy” is enforced in scim…

Are we talking about a spec for access control?  Or, simply about data that scim makes available to other systems for their use?

I know many implementers like i2scim use a variation of ldap acis to enforce access at the attribute level. 

Phil

> On Sep 7, 2022, at 1:27 PM, Danny Mayer <[e-mail]> wrote:
> 
> This gets into the issue of what's confidential information for HR systems. I did send out a message about some of that but it hasn't really been discussed. I can probably dig it back out. You also really need to understand the privacy requirements of different countries and the EU.
> 
> Danny
> 
>> On 9/7/22 9:56 AM, Yoann Gini wrote:
>> Hello,
>> 
>> I'm new to this mailing list so I will quickly introduce myself. I'm Yoann Gini, CTO of a french startup called Bravas who just raised money to build an MDM+IDP all in once, with a big focus on passwordless and modern management for SMBs.
>> 
>> One of our main work will be to work with SCIM as server to get identities from HRIS and as client to push them in cascade to all federated services.
>> 
>> One of the issues we have right now is the need for us to know the validity window of an EnterpriseUser.
>> 
>> For audit purposes and identity lifecycle we consider that all EnterpriseUser in our solution need to have a some attributes defining the contract start date and end date. Some kind of "not valid before" and "not valid after".
>> 
>> Which can also be extended in depth with hold window, for example with birth vacations, when someone is not supposed to work for a long period of time but still employed, the not valid before/after dates does not change, but we may want to add an "on hold" overlay for that vacation time.
>> 
>> This is not covered by User or EnterpriseUser scheme, and I do not see other scheme at all here https://www.iana.org/assignments/scim/scim.xhtml
>> 
>> Is this kind of need already covered by a Draft? If yes, where to find it/them? If not, do some people here want to collaborate on something?
>> 
>> And since I'm new to this list, if this is not the correct way to question existing work in progress on specific topics like that, let me know how and where I should ask.
>> 
>> Best regards
>> Yoann Gini
>> 
>> 
>> _______________________________________________
>> scim mailing list
>> [e-mail]
>> https://www.ietf.org/mailman/listinfo/scim
> 
> _______________________________________________
> scim mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/scim