[scim] Re: Pagination Support for Multi-Valued Attributes in SCIM 2.0

[Phillip Hunt <[e-mail]>]

There was a mult-value paging extension draft submitted back in 2019.

https://datatracker.ietf.org/doc/draft-hunt-scim-mv-paging/

This was basically adding paging features to the filter query so that queries like the following become possible:

> In the following example, all Groups are searched and only Groups
>    whose name starts with "Group" are selected.  Additionally, the
>    members attribute values are filtered return only member values with
>    "type" equal to "groups" (as in sub-groups) returning only the first
>    5 values using the attributes paging qualifying parameters.
> GET /v2/Groups?filter=displayName sw 'Group'&attributes=*,members[type
>       eq \"Group\"&count=5&startIndex=1]

The draft had the advantage of being backwards compatible and was relatively stateless.

One note, it’s not clear, but the first example in the draft of retrieving only work emails is to show existing core
SCIM functionality.  The following example show how the extension of adding paging values, allows a client to
ask for sub-sets of items.

I think it was lost in the Covid shutdown that happened after.

Cheers,

Phil Hunt
[e-mail]






> On Jan 29, 2026, at 6:32 AM, Daniel Cormier <[e-mail]> wrote:
> 
> We've had the same problem getting groups with many members (some with
>> 100k). For what it's worth, since it is an internal implementation,
> we added a new endpoint: GET /Groups/{id}/members. Our flow was to
> retrieve the group (GET /Groups/{id}) with its members excluded, then
> paginate through GET /Group/{id}/members separately. It worked well
> for our case.
> 
> Some previous discussion around group member pagination:
> 
> * <https://mailarchive.ietf.org/arch/msg/scim/YCcs_ZRWOo4HM8zxKbXlAi2Cpag/>
> <-- Mentions the same solution we used
>  * <https://mailarchive.ietf.org/arch/msg/scim/67Bd0iotMoEx5rcjCUsHUzQzQGU/>
> * <https://mailarchive.ietf.org/arch/msg/scim/txBFAJgcxb0mhIi1Bp0jaL6t2WU/>
> 
> _______________________________________________
> scim mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]