[scim] Clarification on Groups Schema membership attribute

Brian Demers <brian.demers@gmail.com> Fri, 06 January 2023 19:09 UTC

Return-Path: <brian.demers@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B37B4C151701 for <scim@ietfa.amsl.com>; Fri, 6 Jan 2023 11:09:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eXHYSZ3BTbRC for <scim@ietfa.amsl.com>; Fri, 6 Jan 2023 11:09:34 -0800 (PST)
Received: from mail-pj1-x1030.google.com (mail-pj1-x1030.google.com [IPv6:2607:f8b0:4864:20::1030]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CE4AC14CE25 for <scim@ietf.org>; Fri, 6 Jan 2023 11:09:34 -0800 (PST)
Received: by mail-pj1-x1030.google.com with SMTP id v23so2385023pju.3 for <scim@ietf.org>; Fri, 06 Jan 2023 11:09:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=MwBzCk0DKQNgWsgDODXr+bZ17pCcgFIimpRMm+nGQoE=; b=OEn2hT1b/bdmgr/lq54/kYBqyiz/vzUJphRvlHxI7RVz70dNM+JSVIjclpo4lE+iIB trDX41KJTAaReO/i31Wq47QI81+85yF7amZhSJveqbBE4zUPJ777V8x6BX/n5j6UEodn jX5P7HMIv8WhYL7ImZR0JgCibGgbGQDhZ990psCOF3FPSIAwqOltYfek4l+WtdnJtAd/ iQviHsE3XVMVCZ7Qv8O3h6w074RjfHe8dCsEwqDMG1tH8/C+kEMOmTzDQMFuDTa0Wbet RZgZiaiM+0cUdx+ANWTV9AwdOkmbGZe1VMx8nntdGIpIPNRw2gh8vcGpDE2/pX5e0zJ5 ztHw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=MwBzCk0DKQNgWsgDODXr+bZ17pCcgFIimpRMm+nGQoE=; b=FQRRM3sE1cU/QvQkSNANm0SuFyojp9VuLHfVWUxfrCPgPNscNsBlaAKoG2iEhs4E8n auamU7RvK6XwBAUqxAinjPuvUZZiI8Ad+Clateu7iJloYBEMvTBRoKdOqbWSVyBtVXZu i09rE/6Q8XRfOtoHwRy8HxtjH5RE++WOKLrtvu978i94+sKW9PSIiBVvovvpOw2lAzwQ FjB4+ZI74cv+FhkjS0TdLQJzjkYWfsTIOHvz/t0Y055z/y4KZT6XTgwS6jfEzAahpuxU hpWVubLSNoUJ6heP7/ZiHSaLHWwaXg5bIgs+m4AhE9XYeQvawLIpmtr6GogpCEvVHDqH 7Zdg==
X-Gm-Message-State: AFqh2koLLGoLksGKj1ZxzlP5uJFU7/kHsF4PusQmMbsV4yvUtpKi3nGJ 2muO3FtW++SsxVjo9/U+xeU7Ze1vYo+qt8uj/ozauo1MGyA=
X-Google-Smtp-Source: AMrXdXvdoNE5CNhwxOY3RAkY2EKwMhOIAEXbK8S79yysbmgV7Lg12pPEdcIM+USUWUblUxatzQatvu2MbnBh7P5xTN4=
X-Received: by 2002:a17:902:7c17:b0:192:94d2:19a7 with SMTP id x23-20020a1709027c1700b0019294d219a7mr1565082pll.54.1673032173537; Fri, 06 Jan 2023 11:09:33 -0800 (PST)
MIME-Version: 1.0
From: Brian Demers <brian.demers@gmail.com>
Date: Fri, 06 Jan 2023 14:09:22 -0500
Message-ID: <CAH9eYVpJQeoxyzQXmA_RD6u4SW01ph5LVywcdbTqAaZHQP5u=A@mail.gmail.com>
To: SCIM WG <scim@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000066d29805f19d28da"
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/LY_lqCToYTiUKBLiLDD2eLBYrf4>
Subject: [scim] Clarification on Groups Schema membership attribute
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Jan 2023 19:09:34 -0000

TL;DR - What are the official sub-attributes of "membership" items in the
Groups schema?

The Groups schema listed in section 8.7.1 lists the possible sub-attributes
for `members` to be: `value`, `$ref`, and `type`.
The example in 8.4, contains `value`, `$ref`, and `display`

Section 4.2,  "Group" Resource Schema, only makes reference to `id`,
`$ref`, and _hints_ at `type`

members
      A list of members of the Group.  While values MAY be added or
      removed, sub-attributes of members are "immutable".  The "value"
      sub-attribute contains the value of an "id" attribute of a SCIM
      resource, and the "$ref" sub-attribute must be the URI of a SCIM
      resource such as a "User", or a "Group".  The intention of the
      "Group" type is to allow the service provider to support nested
      groups.  Service providers MAY require clients to provide a
      non-empty value by setting the "required" attribute characteristic
      of a sub-attribute of the "members" attribute in the "Group"
      resource schema.


NOTE: Section 8.7.1 does state the following:
> Where permitted, individual values and schema MAY change

If this schema is not complete, is there an _official_ schema in JSON
that is?