Re: [scim] Work Items and Topics - Catalog and Tally

"Matt Peterson (mpeterso)" <Matt.Peterson@oneidentity.com> Fri, 24 July 2020 15:35 UTC

Return-Path: <Matt.Peterson@oneidentity.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6C093A0E5F for <scim@ietfa.amsl.com>; Fri, 24 Jul 2020 08:35:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=oneidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YdzFnSt3zT8T for <scim@ietfa.amsl.com>; Fri, 24 Jul 2020 08:35:23 -0700 (PDT)
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10on2126.outbound.protection.outlook.com [40.107.93.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EEAA3A0ECC for <scim@ietf.org>; Fri, 24 Jul 2020 08:35:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nsXMlYHyl78NMc4c180vAx9P489oH7uVFibmaNKvHdDWPtKW1G+laoiXXbnipcoHMxqhstjN1Xc71+jJ1ce307c2YaYLizcVU2YbYk2/rfhAXP+zvRB28fvM99TmvH/GKGoeZh8tsMev5tHBQE80g7fpKCp6L1xjr86FRXj/W550oY5NJOHAd3peU6KdLmNl1EoYF4xb+2JP83ppeOnxhzXkxJvio1+4b+pa4xAKbLGz6ti78WyzMetWa+t5vqIG4Mv1U3UOmwBPM6G43fSLEqQuAcESTUWzn5oKyH6WPX+I3+jdR1HxlV20NQhwCyDB22d46w896dH+BQBZ4+m2BA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+Zre8Au84QyweHTBFubr90XxfxqA1K/90JFxK3eoFVk=; b=jgo7mgqyNNTQRInaRZbQM4DcH8i3VriYOfbjQ6RKkHNZj8tqb1zEdLvmgV1rcGNWVDOSHif6gJhBlLbQW21XJnGl8ufNBwpSCSKaBtHltzKl8NmLHsP2Gm3IgI/Aadz3VcDx/G+4Ep+Z4VwnY8z8zk/UL16tjxeAXR+q5Z+Dv9L8droYAKRqfw25xLZp16TDleicqTyougXDF+GTUYw+0dT6g1Ayez3idaplxTsseDZxq6kZm5EZsysm2JXWiaI3ljEw6p9FjuRFJBaWJtqJJIGCRcnVvJhg+wXyP2qzaoU9+3xNgDthn9G+mRHOkb+ZRTBMHnfhv/vb/glpR5gloA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oneidentity.com; dmarc=pass action=none header.from=oneidentity.com; dkim=pass header.d=oneidentity.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oneidentity.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+Zre8Au84QyweHTBFubr90XxfxqA1K/90JFxK3eoFVk=; b=pGG9cQNaH6Ls0rPhG0LPWlSODinkB50M9vTScwdGmesAmkoBoghYA/NS2XgIQrxn9AY3YrZv16eJ0P40Cen0b5Wz4cqk+voNxwl9WyZ0+B5Sq1FZ/Mux5GOqSXCQ4L9Z5vKlImM3RlUrFUBS8L3od039hoBZmZRtnJiyA2+KUJI=
Received: from MWHPR19MB0957.namprd19.prod.outlook.com (2603:10b6:300:a4::16) by MWHPR19MB1245.namprd19.prod.outlook.com (2603:10b6:320:30::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.23; Fri, 24 Jul 2020 15:35:00 +0000
Received: from MWHPR19MB0957.namprd19.prod.outlook.com ([fe80::dc4d:93f3:2059:4c69]) by MWHPR19MB0957.namprd19.prod.outlook.com ([fe80::dc4d:93f3:2059:4c69%8]) with mapi id 15.20.3216.026; Fri, 24 Jul 2020 15:35:00 +0000
From: "Matt Peterson (mpeterso)" <Matt.Peterson@oneidentity.com>
To: Darran Rolls <me@darranrolls.com>
CC: "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] Work Items and Topics - Catalog and Tally
Thread-Index: AQHWYGJDHWtaSPZ+i0mipB8gz1RhrqkWiwmAgABTtyA=
Date: Fri, 24 Jul 2020 15:35:00 +0000
Message-ID: <MWHPR19MB0957F464E9125015451ED94BE1770@MWHPR19MB0957.namprd19.prod.outlook.com>
References: <0A1C87DD-A06A-42CF-B77F-A4A524F0C69F@darranrolls.com> <CANUxaEkrT9OMgoZgusSo+t1=MTb-s8sry_Gryx0nhi8zP1HGrw@mail.gmail.com>
In-Reply-To: <CANUxaEkrT9OMgoZgusSo+t1=MTb-s8sry_Gryx0nhi8zP1HGrw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: darranrolls.com; dkim=none (message not signed) header.d=none;darranrolls.com; dmarc=none action=none header.from=oneidentity.com;
x-originating-ip: [166.70.31.124]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: e643b9b5-d234-4594-1244-08d82fe72099
x-ms-traffictypediagnostic: MWHPR19MB1245:
x-microsoft-antispam-prvs: <MWHPR19MB12458BCEFC12357BCF02B6CEE1770@MWHPR19MB1245.namprd19.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: ioaZXlgaVRjO9WiZ4rP4Aw4/jGfuUgDSUSVXDdKCQ48GGM0eng6NLonmwHbJEAkdLBZBS6654BXahtJ1iiKHJ6Bj9Fq+IC1WOd4CJMSj0NAnM2vlVB1J3PgivVkGoWWJ4gncE/z+qLpP8qgWdt1xjZOoFLshpNyf3cpX0eBn0O0eu5AItrdvlLxUDL3WPu3cVpGLRPLqpvw1JV1lWiVcDMm+NE4pDGAhkPtY+WRkX1WyoCQTwfURQ75Jcucs+cTdDAsBt7qZUS5esTkyONy3/raE0/yFnJnIWNJK/1u4CWW3gLfIlwePOY8SxRcveVstefu9xxLWWL/xQE8UItFh0+z7xa9Zjed6aBTB7WmZfeYNK68MT1OJVrvZgabnK/9JYL8souwK2M694UJ4sdvdXw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR19MB0957.namprd19.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39840400004)(346002)(136003)(366004)(376002)(8676002)(45080400002)(83380400001)(186003)(66946007)(71200400001)(76116006)(53546011)(6506007)(26005)(55236004)(2906002)(8936002)(7696005)(4326008)(52536014)(9686003)(55016002)(66476007)(166002)(966005)(6916009)(478600001)(316002)(66446008)(64756008)(66556008)(33656002)(5660300002)(86362001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: iO9RjU6YAFdGk5Na5L6LbZlLRBrgvQLRev1G07KbT7Zis5c6bv5F+YtUAGNvBcvC9JhU5xXOCgtIbaS2wnTVjDwf2SkqcWkN0X9pJ8zTSB01oV2+BFzoxzIQwZzLiiYBJolSl/2c2nvOM2vNYZrFn/kL/hDndABTYott9mIpJxjof4N1PFEcGnw0M1DOp7JrV4dTjJFW3cGCZbaME60b9jGsXUsx/0KBRcVJBeNIfuiN/Ku9DGxBhqAisWDFKXGkEw0lUd7KPTteZAy2JeMgk1zVD33rs8QJpmCJ11ln8hT/5QhSNMLMf3pNxE3dOQC1eLqu19AYlZdEetgV5bzK9N28ATCNFqh5m1nBVC1WpdYxs8ppbVHkP+zHLEPL2znghHIG7Nd2mYK1Dn6wYSn2gJMpgtFDUNCzCrsLS3rhe6UQh2l9m63i7IHcjVfzhRy1vY56FbLQJGmwJ+RB3iVADfZtt0XTSS9tBE4KiCUw9k4=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MWHPR19MB0957F464E9125015451ED94BE1770MWHPR19MB0957namp_"
MIME-Version: 1.0
X-OriginatorOrg: oneidentity.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MWHPR19MB0957.namprd19.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e643b9b5-d234-4594-1244-08d82fe72099
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2020 15:35:00.2589 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 91c369b5-1c9e-439c-989c-1867ec606603
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +ytJMKl3a6nJvMXkiqr1CBQZzp2A7+mP3xI5jhfcbVMNBov+no5e6qtBQsCzkpz3k+U7l8JSIcibVLVhEA7y/A==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR19MB1245
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/M9K6T15vhXS3ySvriN04iCJh10Y>
Subject: Re: [scim] Work Items and Topics - Catalog and Tally
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jul 2020 15:35:34 -0000

Darren,

Matt Peterson:  interested in and willing to work on 1, 2, and 6.

From: scim <scim-bounces@ietf.org> On Behalf Of Quint Daenen
Sent: Friday, July 24, 2020 4:34 AM
To: Darran Rolls <me@darranrolls.com>
Cc: scim@ietf.org
Subject: Re: [scim] Work Items and Topics - Catalog and Tally

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.


Hi all

I am interested in the following items, ordered by personal relevance:
- 4. Soft Delete
- 8. Test Suite
- 1 & 2. Multi-Value Paging and Cursor Pagination
- 3. Relying Party User Provisioning

TL;DR
Quint Daenen: Willing to work on items 1-4 and 8.

---

Most SCIM Servers I have interacted with already use Soft Delete 'behind the scenes'. I guess that it is never a bad idea to avoid potential data loss? The draft of Morteza Ansari is a good solution to extend the current spec to support this. It would be great to see this integrated with SCIM.

Today there are various SCIM implementations having their own 'additional' requirements. Such as a required email address, which is not the case in the default user schema. It is possible to define your own schema to enforce this. From my experience it is not that simple to check whether these implementations are compliant with the SCIM specification. I have already written some limited test suites. It would be great if a general Test Suite existed that can validate whether a server implementation is compliant with SCIM. This is all possible since all the needed information is retrievable from the Service Provider Configuration endpoints.

Multi-Value Paging would enhance the current filter possibilities. I think this is the most complex item in the list. It would make SCIM more complex, but at the same time more versatile. This would also avoid overwhelming the client and sp and make the responses cleaner.

The two most used pagination patterns in HTTP-based protocols are: Index Pagination, and Cursor Pagination. It would be of interest to be able to support both. If Cursor Pagination is already used in another application, it can be difficult to create a SCIM implementation for it.

Relying Party User Provisioning would make the scope of SCIM much bigger. I do not think SCIM is currently too big or difficult. Yet this would be a substantial addition to SCIM.

---

Regards
Quint Daenen
LinkedIn<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fquint-daenen%2F&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504311948&sdata=WaW7oRAO%2B6H4hCrukNIu6UGjIZp2XHivOfKovyNluDM%3D&reserved=0> | GitHub<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fdi-wu&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504321898&sdata=jIPgpD1eODksPwO2BAFGhADZHgKVs%2BmyQ3epTJpTWlM%3D&reserved=0>

On Wed, Jul 22, 2020 at 9:57 PM Darran Rolls <me@darranrolls.com<mailto:me@darranrolls.com>> wrote:
In order to asses interest and commitment to specific topics and work items for a refreshed charter, I’ve captured the items discussed so far in the following table.  Please do two things 1) Review the list of items and let me know if there is other work we should be considering  2) By return message indicate the items you are personally interested in and are (more importantly) prepared to work on.  You can either send that message to me directly or back to this thread on the list.  I’ll then summarize the results back to the group.

I’ll start the process by saying:
Darran Rolls:  Willing to work on items 1-6,7,8

NOTE:  Time is of the essence.  Assuming we can get a BOF on the calendar for IEFT 108 next week, we’ll need this data to make our case for re chartering the WG.

#1
Multi-value Paging
Individual Draft
Phil Hunt
https://datatracker.ietf.org/doc/draft-hunt-scim-mv-paging/<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-hunt-scim-mv-paging%2F&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504321898&sdata=pqtGcCs4tF2Jz872sHhyNjp6pFHC6d65M5hC4cfzodQ%3D&reserved=0>
#2
Cursor Pagination
Individual Draft
Matt Peterson
https://tools.ietf.org/html/draft-peterson-scim-cursor-pagination-00<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-peterson-scim-cursor-pagination-00&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504331865&sdata=%2F3QKbNpNLaAmnKj2mNbjHsl%2FL%2F16adzs5muYCYyNkSM%3D&reserved=0>
#3
Relying Party User Provisioning
Individual Draft
Mark Wahl
https://tools.ietf.org/html/draft-wahl-scim-profile-00<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-wahl-scim-profile-00&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504331865&sdata=10%2FDq68fRjEetLn1j0iH%2Ft7kNf89LpOJKLvxYbbmHgQ%3D&reserved=0>
#4
Soft Delete
Individual Draft
Morteza Ansari
https://datatracker.ietf.org/doc/draft-ansari-scim-soft-delete/<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ansari-scim-soft-delete%2F&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504341815&sdata=wtdvOevuX5PN0w4AN9LXBfKeBMEJVkjGdU12UsN1GUk%3D&reserved=0>
#5
New HR Schema
Concept
Matt Domsch

#6
PAM Schema
Individual Draft
Kelly Grizzle
https://datatracker.ietf.org/doc/draft-grizzle-scim-pam-ext/<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-grizzle-scim-pam-ext%2F&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504341815&sdata=0IUg7YFUI%2BD9iFpMdnMl3OMFVpUFJs3pl23uS%2BjNQL8%3D&reserved=0>
#7
Interoperation Considerations
Concept
Darran Rolls

#8
Developing a Test Suit
Concept
Darran Rolls


Thanks

--
Darran Rolls
https://www.darranrolls.com<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.darranrolls.com%2F&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504341815&sdata=XHGhSm0j9LVqGZS0RYDiIucIRuYJcYX2PnU8uLYUrVA%3D&reserved=0>
LinkedIn<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fdarran-rolls-068b84&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504351768&sdata=xR%2BHsHBQR96PB0LyFOOkbnZGCHOU2lZOGB1g5re%2FDCo%3D&reserved=0> @djrolls<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fdjrolls&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311836504351768&sdata=Aywg9WYUuDZY2vy6PDSPRgQTBKRwyILt88G6oCE1q%2FE%3D&reserved=0>

_______________________________________________
scim mailing list
scim@ietf.org<mailto:scim@ietf.org>
https://www.ietf.org/mailman/listinfo/scim<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fscim&data=02%7C01%7Cmatt.peterson%40oneidentity.com%7C115b5f81864e48d965b408d82fbd17ff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637311836504361724&sdata=%2Bp3K9QmtCiykoazSCZtCeczzInqFnAe1cp8QwAxp1lM%3D&reserved=0>