[scim] Error extensibility in SCIM - meeting follow up

Jennifer Schreiber <jennifer.winer@workday.com> Wed, 17 January 2024 16:32 UTC

Return-Path: <prvs=374631bb3f=jennifer.winer@workday.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5514AC14F696 for <scim@ietfa.amsl.com>; Wed, 17 Jan 2024 08:32:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.102
X-Spam-Level:
X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=workday.com header.b="XilQYk8s"; dkim=pass (1024-bit key) header.d=wdinternal.onmicrosoft.com header.b="uKs0jsnS"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jTA44W2MZ8iB for <scim@ietfa.amsl.com>; Wed, 17 Jan 2024 08:32:03 -0800 (PST)
Received: from mx0a-001ee601.pphosted.com (mx0a-001ee601.pphosted.com [148.163.157.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A874AC14F70F for <scim@ietf.org>; Wed, 17 Jan 2024 08:31:58 -0800 (PST)
Received: from pps.filterd (m0272036.ppops.net [127.0.0.1]) by mx0a-001ee601.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 40HGTSqR029082 for <scim@ietf.org>; Wed, 17 Jan 2024 08:31:57 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=workday.com; h=from : to : subject : date : message-id : content-type : mime-version; s=Workday; bh=uPRq4tJgQc6u01OH6BkiGVMhgh8iBSDCziBV2mkAqOc=; b=XilQYk8sitcBtqpJIF3sNuvj/fSEyRvBrFkSWj4pNFDU49KiKxVsoKEnUQI02I6Donyh m799D/DAa8TLuD+nLylB3Hr3fxv68u6azD1YF2sqnrptgYaD5b2dWsONFaob54AGP7pv 5qqHZxQ7852m/9laBU6ODWbLNRfRPkPXAox3HTDDHOiD/c+oTMMOXuzqD0QNDkJ8KGUZ Bp7L8wzdW5KGSvJ2Wyc6qTdJrBY/BLiXTki2CACJtX0GJv3rU0/r/dNEQKQtIhmNaaAx B0ppH1y7rrra7ISdYIlF3GMwqoHCtKhprKQMBnHGQPFq6By31Ui7Bzu+WR6QqetYv1G2 Rg==
Received: from nam12-bn8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2168.outbound.protection.outlook.com [104.47.55.168]) by mx0a-001ee601.pphosted.com (PPS) with ESMTPS id 3vph83g4ym-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <scim@ietf.org>; Wed, 17 Jan 2024 08:31:57 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=g7qyNsO6DORccsX8ufIpBe6PT20G2Tg/+9PKpk/cSPHvs0u8MLYaIR8M5AjHd/cCRVOztdVRN/sTBUBPioU2483B6j8kOu1HQQ2EOoch46kUv6uI/FhqrGtEbaHEm+lip+nqcWG7hZhC5CtbA8ykfsG1lkolw8GVcqpaTRrGKfWg5zNPvv5ehupwGiR3a0a5QzZbG4762FUs/uTITRJeYa+m6vB+OZhNo6Cf9cniXIk7Kzx5R+DvEg8vlZtGVs2lPTVUYClXXIHw9GiNwCpBRvf6jiMg+L80dsjDvJU0F6tNx5QNytu27ghK7IUtBi+/mZl1MEmv0MyzzSEfdqxwAA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uPRq4tJgQc6u01OH6BkiGVMhgh8iBSDCziBV2mkAqOc=; b=nkExkYSK4b4x9m5HEMa+cDOfhTPtlKxULj97YvtqIVyZ0judHbTfExZtPlz/CVojjtNKHAKH65iP1pWdY3SKjFPEdggZH2h15JobxFiMd5HoiFyO7XLUfGJTWGUf+W9KVJHTGx9y34UBqM5hbsWZvbf7zTpB6JPfWU/9mLGxAR4nI9R4sv2hFD9Z2/dLgm47qsLFxw6KmxlFbqVIYQLqtwKm6tF1MBRja5LjxS/eKdpmsZlU9Z2szX1TdImytmcymQVUCi+Xcuxlw8UWl3vWua3rf/ZGAj11EyHJlgcqZIDKqniPrVAIKTcSnGb4Yzrw8XzMzoEV4lK4BozfLaU4XQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=workday.com; dmarc=pass action=none header.from=workday.com; dkim=pass header.d=workday.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wdinternal.onmicrosoft.com; s=selector2-wdinternal-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uPRq4tJgQc6u01OH6BkiGVMhgh8iBSDCziBV2mkAqOc=; b=uKs0jsnSMeIKjfAoxT/tsNlJZ0Ip3oE5+cvZKgcxp26Ys+02zG7AqHcOxuo/+rRwsWLgYgT0RC97kSRVboEWcbFdwET2LrFUT1JXSfkSKkPmBv8t/953J6Rpnj8/s17F9VTtianSmI/7OLPPJ+ORM0tDR3PU0YDXySxt9hWn+hQ=
Received: from CY4PR06MB3413.namprd06.prod.outlook.com (2603:10b6:910:52::38) by MW4PR06MB8361.namprd06.prod.outlook.com (2603:10b6:303:128::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7202.23; Wed, 17 Jan 2024 16:29:50 +0000
Received: from CY4PR06MB3413.namprd06.prod.outlook.com ([fe80::48df:71fa:dc52:621b]) by CY4PR06MB3413.namprd06.prod.outlook.com ([fe80::48df:71fa:dc52:621b%3]) with mapi id 15.20.7202.020; Wed, 17 Jan 2024 16:29:50 +0000
From: Jennifer Schreiber <jennifer.winer@workday.com>
To: "scim@ietf.org" <scim@ietf.org>
Thread-Topic: Error extensibility in SCIM - meeting follow up
Thread-Index: AQHaSWFOrF9BhnktTEedJF5D2RzO6A==
Date: Wed, 17 Jan 2024 16:29:50 +0000
Message-ID: <CY4PR06MB34132DAEE819AB18D45EC76996722@CY4PR06MB3413.namprd06.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CY4PR06MB3413:EE_|MW4PR06MB8361:EE_
x-ms-office365-filtering-correlation-id: 5b43132d-e3db-4fc0-5a16-08dc177986ef
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CY4PR06MB3413.namprd06.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(346002)(396003)(39860400002)(366004)(136003)(376002)(230922051799003)(451199024)(1800799012)(64100799003)(186009)(6506007)(26005)(83380400001)(9686003)(38100700002)(122000001)(66446008)(71200400001)(5660300002)(8676002)(52536014)(6916009)(41300700001)(2906002)(8936002)(478600001)(316002)(66476007)(66556008)(64756008)(91956017)(76116006)(66946007)(33656002)(86362001)(166002)(7696005)(38070700009)(55016003); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CY4PR06MB34132DAEE819AB18D45EC76996722CY4PR06MB3413namp_"
MIME-Version: 1.0
X-OriginatorOrg: workday.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CY4PR06MB3413.namprd06.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5b43132d-e3db-4fc0-5a16-08dc177986ef
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2024 16:29:50.1923 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 32e232f6-4e92-46d3-b401-fe8baa3788e9
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: FzUJeJNsho0T/26Ydr5Rhi44gxgbEzdg7ax69HdQ3eSE4qncIbGD8uvztANYv07NTCJsMnM6bBU/6iqdhWKAITcQfmK0XIO4IWUcozuMPKgHf859VZqSV9JNACMDPiB6
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR06MB8361
X-Proofpoint-ORIG-GUID: iDuToqHwjaZRZqYSKwJ1bSSNtDGMOcvI
X-Proofpoint-GUID: iDuToqHwjaZRZqYSKwJ1bSSNtDGMOcvI
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.997,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-01-17_10,2024-01-17_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=0 malwarescore=0 spamscore=0 suspectscore=0 mlxlogscore=429 mlxscore=0 lowpriorityscore=0 phishscore=0 priorityscore=1501 clxscore=1015 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311290000 definitions=main-2401170120
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/UuvUb_TxcPm16OeO4i-iEn3SScg>
Subject: [scim] Error extensibility in SCIM - meeting follow up
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jan 2024 16:32:07 -0000

Thanks everyone for a great discussion yesterday at the meeting. We discussed error handling as relevant to scim events draft and RFC 7644.

Mainly, the big question that came up:
Is there any extensibility method for the error messages ("urn:ietf:params:scim:api:messages:2.0:Error"), similar to Section 3.3 of RFC 7643<https://datatracker.ietf.org/doc/html/rfc7643#section-3.3>? Can error messages, as well as the other scim messages defined in Section 8.2 of RFC 7644<https://datatracker.ietf.org/doc/html/rfc7644#section-8.2> be extended?

Section 3.12 of RFC 7644<https://datatracker.ietf.org/doc/html/rfc7644#section-3.12> is a bit vague about the matter.

This came up for my internally, as the error message is not meeting my implementation needs. We're requiring an additional field, errorCode. Anjali also mentioned the need for an jsonPath field.

During the meeting, we talked through a couple ideas (that I will review in the next meeting) such as below, but we kept coming back to the same extensibility question. I wanted to open up the discussion here prior to the meeting.

```
   {
     "schemas": ["urn:ietf:params:scim:api:messages:2.0:Error", "urn:ietf:params:scim:api:extension:messages:2.0:AdvancedError"],
     "scimType":"mutability"
     "detail":"Attribute 'id' is readOnly",
     "status": "400"
     "urn:ietf:params:scim:api:extension:messages:2.0:AdvancedError": {
         "errorCode": "ABC-1235"
     }
   }
```

Thanks,
Jen