[scim] Globally Unique Resource Identifiers

Shelley <randomshelley@gmail.com> Wed, 09 August 2017 22:07 UTC

Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25E2C132454 for <scim@ietfa.amsl.com>; Wed, 9 Aug 2017 15:07:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Tz8pznVYdS7 for <scim@ietfa.amsl.com>; Wed, 9 Aug 2017 15:07:36 -0700 (PDT)
Received: from mail-ua0-x22c.google.com (mail-ua0-x22c.google.com [IPv6:2607:f8b0:400c:c08::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B1B11323C6 for <scim@ietf.org>; Wed, 9 Aug 2017 15:07:36 -0700 (PDT)
Received: by mail-ua0-x22c.google.com with SMTP id d29so34166776uai.2 for <scim@ietf.org>; Wed, 09 Aug 2017 15:07:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=VOWrXUpX53gj4xFNB5KJHx5eu42QIATJkmWGBBZJiKo=; b=SauVSNojV5EazGyDlifarnUnXjHHJGTYIsfH1It6LfvypKpjdFvhs4jNChcpzFqsez QHtnJnFK3XAdZe5rLAudINWjBkeF262ijezVCr875u4YmgyoZphXFv7OpO6z4Yhm0M8R 4/CfapecNOEYMdc0eR9GjbLPxbp6KrOnKkd03G8CdLEUc57kGq0/qw8bawykkma4AwVc X/GYnZB0PiTxQv8ZUuIwN1TrnL9B+tpuoeDAtT/YoipRHFchLQq22QICgAVaJU1QeWQ/ 5VRH4NLSYj+RtEJD/GxNwKp+LgfsyK/BhOtlIReJAsaPExGioYldecsw9DWZzDOTPpE5 BG2w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=VOWrXUpX53gj4xFNB5KJHx5eu42QIATJkmWGBBZJiKo=; b=hRegtOk0OheKwmhc2rTVJbv0U8jFq9C3+ezR4DCvx0IBYpUPv7JczVI9K3eUbN4KlX +N6ps9Bjas72Ow0NbnuMZRxQ4mZ87lqJHhN0MD/V8ZtNB/zA+tQCdA/aWFVq1dT27N6s N+6Udy7pJlhIs7ls3kbQsXDG6XrNuxKizssHz/LhVcxevckx4F/LOHpl2gAkPif+YS1D hmrbnOyxWm+pqqJXKBLHguAeEQuu5nJyxU43YjHIiqjxAu7qlFAySIPXTTyg0UNecrXm 2kBPLrzlQxK2lFoo1Pk62r+Xcag4OHMHehaJxZ5Va/PuGj/ofbDUd5scJ3zL29w9nRDv WdGg==
X-Gm-Message-State: AHYfb5iqpLDlniv/gwLmPPA9WabcwlOihgxUSgqOZxkm3Q6FYMcpEGt6 qU+2dJykBBmyFgWOG/Ee25/FLvEQE/8D
X-Received: by 10.159.62.212 with SMTP id n20mr7346085uaj.142.1502316455549; Wed, 09 Aug 2017 15:07:35 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.31.197.135 with HTTP; Wed, 9 Aug 2017 15:07:35 -0700 (PDT)
From: Shelley <randomshelley@gmail.com>
Date: Wed, 09 Aug 2017 17:07:35 -0500
Message-ID: <CAGUsYPy2CQCxMRzfoFdHGv-_LPHJtJTG3D_FPJwmKf-2qtWL9Q@mail.gmail.com>
To: "scim@ietf.org" <scim@ietf.org>
Content-Type: multipart/alternative; boundary="089e08205ee0ac63300556594e42"
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/TblJb0ZU082HUa09ZQRf8eEJrgY>
Subject: [scim] Globally Unique Resource Identifiers
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Aug 2017 22:07:49 -0000

The SCIM specification indicates that the id [1]:

*MUST be unique across the SCIM service provider's entire set of resources.*
>

Is this implying that the identifier must be globally unique across *all
types of resources*, or simply that the identifier must be unique across *all
resources of the same type*? Further, how does this statement account for
*tenancy*?

Requiring uniqueness across resource types may incur undue burden on
service providers to maintain. All resources are relative to a type, e.g.
/Users/<id>. Even the global search functionality doesn't require global
uniqueness because the combination of resourceType and id may be used to
uniquely identify resources. Further, the SCIM 1.1 specification did not
have this requirement, so this could make uplifting to SCIM 2.0 more
difficult for some providers.

[1] https://tools.ietf.org/html/rfc7643#section-3.1