Re: [scim] [EXTERNAL] Re: Clarification on SCIM schema extension URN naming rules

[Danny Zollner <[e-mail]>]

As of the last time I attempted to look this up, the only SCIM IANA registrations that exist are the ones defined in the SCIM 2.0 RFCs (7643/44). Registration with IANA is fairly clear, but for unregistered use it isn’t. Phil, you’re saying that anyone, without registering with IANA, can freely use urn:ietf:params:scim:schemas:… for a schema URN without breaking any rules? If so, I believe that answers all of my original questions, and at best adds some minor to-do item for clarification on this in a future update.

Thanks,

Danny Zollner (He/Him)

From: Phillip Hunt <[e-mail]>
Sent: Tuesday, October 4, 2022 4:26 PM
To: Brian Demers <[e-mail]>
Cc: SCIM WG <[e-mail]>; Danny Zollner <[e-mail]>; Stanimir Bozhilov <[e-mail]>
Subject: [EXTERNAL] Re: [scim] Clarification on SCIM schema extension URN naming rules

Section 10.2.1 of RFC7643 describes the structure:


 urn:ietf:params:scim:{type}:{name}{:other}



      The keywords have the following meaning:



      type

         The entity type, which is either "schemas" or "api".



      name

         A required US-ASCII string that conforms to the URN syntax

         requirements (see [RFC2141<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-editor.org%2Frfc%2Frfc2141&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784609810%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=EEnHr6F3Ci9sQTZSdByVrgob%2F33UugbLoUxiZqZfSrQ%3D&reserved=0>]) and defines a major namespace of a

         schema used within SCIM (e.g., "core", which is reserved for

         SCIM specifications).  The value MAY also be an industry name

         or organization name.



      other

         Any US-ASCII string that conforms to the URN syntax

         requirements (see [RFC2141<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-editor.org%2Frfc%2Frfc2141&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784609810%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=EEnHr6F3Ci9sQTZSdByVrgob%2F33UugbLoUxiZqZfSrQ%3D&reserved=0>]) and defines the sub-namespace

         (which MAY be further broken down in namespaces delimited by

         colons) as needed to uniquely identify a schema.

So this process is about managing the URN namespace and avoiding conflicts. IANA is in charge of this.

Any URI starting urn:ietf:params:scim is in the SCIM namespace. The next level “type” is used to dsitinguish between protocol schemas (eg.”api") vs. resource schemas (“schemas”).  For example “api” is used to describe the JSON schemas for a SCIM PATCH request, a SCIM SEARCH request via (POST), and List Response.

The next level is the “name” which can be any major name you want (like a company).  “core” is the one that indicates a SCIM WG specification.

So as an example a third party (e.g.  “hralliance”) might want to publish there own specification and register with IANA per the process described. They might choose a namespace like:

urn:ietf:params:scim:schemas:hralliance:employee

Section 10.3 describes how to do formal registration. The main reason for registration is to:
a) reserve a URN namespace for schemas
b) advertise the availability of the specification to others.

This is not unlike how IANA is used to register mime types (e.g. application/scim+json).

Phillip Hunt
@independentid
[e-mail]<mailto:[e-mail]>




On Oct 4, 2022, at 2:09 PM, Brian Demers <[e-mail]<mailto:[e-mail]>> wrote:

Sorry, my last message wasn't clear.

This line:
> The spec states the URN prefix for the IANA registered schema.
probably should have read:
> RFC7643 states the URN prefix for the IANA registered schema.

Because of this, I'm assuming URN's starting with the prefix `urn:ietf:params:scim:` _should_ be avoided unless the schema is being developed through or reviewed by the working group (per 10.3.1)?

On Tue, Oct 4, 2022 at 10:24 AM Phillip Hunt <[e-mail]<mailto:[e-mail]>> wrote:
I would take a look at the IANA section of RFC7643. It details the namespace and registration process for SCIM urns.

Phil

> On Oct 4, 2022, at 7:33 AM, Brian Demers <[e-mail]<mailto:[e-mail]>> wrote:
>
> Same question here!
>
> I gave a SCIM talk yesterday, and Iglossed over this topic, because it was not clear to me.
> The spec states the URN prefix for the IANA registered schema.
> But that may suggest that non-registered schema should avoid that prefix? 🤷
>
> -Brian
>
>>> On Oct 4, 2022, at 9:13 AM, Stanimir Bozhilov <[e-mail]<mailto:[e-mail]>> wrote:
>>>
>>> On 2022-09-30 07:37, Danny Zollner wrote:
>>> Hi SCIM-ers,
>>> In RFC 7643, as best I can tell, all of the examples of schemas for
>>> SCIM resources begin with the prefix of
>>> urn:ietf:params:scim:schemas:…, with the sole exception of the text
>>> on page 29 that refers to the schema for the ResourceType resource.
>>> This text describing the schema for the ResourceType resource contains
>>> the following:
>>> schemaExtensions
>>>     A list of URIs of the resource type's schema extensions.
>>>     OPTIONAL.
>>>     schema  The URI of an extended schema, e.g.,
>>> "urn:edu:2.0:Staff".
>>>        This MUST be equal to the "id" attribute of a "Schema"
>>>        resource.  REQUIRED.
>>> This example uses urn:edu:2.0:Staff as the example for an extension
>>> schema, but all other examples of schemas in RFC 7643 that I could
>>> find use the ietf namespace. In a discussion I was having with a
>>> colleague of mine a few months ago, it was stated that the only schema
>>> URNs that should be using the urn:ietf:.. namespace are ones contained
>>> in IETF-managed drafts or RFCs. I've worked with dozens of SCIM
>>> service provider implementers in the past few years, and possibly
>>> without exception all implementers that have custom schema extensions
>>> do something equivalent to
>>> urn:ietf:params:scim:schemas:extension:CompanyName:2.0:User.
>>> I'd like to get input from others in the working group - is it correct
>>> that for non-IETF managed schemas - such as those that are custom to a
>>> single SCIM implementation - that a schema extension URN should not
>>> begin with urn:ietf:… but instead virtually anything else - i.e.:
>>> urn:foo:bar, or the example above of urn:edu:2.0:Staff?
>>> If it is the case, then I've got the following questions:
>>>   * Does improper schema URN naming(improper usage of urn:ietf:.. )
>>> have any negative impact?
>>>   * For future guidance on this topic as part of the SCIM 2.0 standard,
>>> should any consideration be given to the fact that the overwhelming
>>> majority of SCIM 2.0 implementers have implemented their extensions
>>> starting with urn:ietf:..?
>>>   * If a future version increase of SCIM happens - 2.1, 3.0, etc -
>>> should clearer guidance on proper versus improper schema URN naming be
>>> given, including explicit guidance that urn:ietf:… is reserved?
>>> Thanks,
>>> Danny Zollner
>>> _______________________________________________
>>> scim mailing list
>>> [e-mail]<mailto:[e-mail]>
>>> https://www.ietf.org/mailman/listinfo/scim<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fscim&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784609810%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=S8mZ%2F0cu0fhToMAgJtiGdVUeMcC8%2F33YdRcS2KVCqy4%3D&reserved=0>
>>
>>
>> Hi Danny,
>>
>> We're currently facing the same issue where it's not completely clear how one is supposed to define the URN of new resources or extensions in SCIM.
>>
>> For the time being, we took the approach where we have the "urn:ietf:..." prefix and at the end of the URN we have "CompanyName:2.0:SomeResourceType". However, we weren't really sure whether this was actually proper naming and so we could easily change the URN naming in case it turns out that this is not the right way to go about naming new resources and/or schema extensions.
>> Regarding this matter, we'd also be particularly interested in feedback and official guidance on how such naming should be done in general.
>>
>> Best regards,
>> Stanimir Bozhilov
>>
>> --
>> Stanimir Bozhilov
>> Tel: [phone]
>> Fax: [phone]
>>
>> http://www.audriga.com<https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.audriga.com%2F&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784766021%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=LgRO6%2FiIcWSWo8EZDxjV2hb%2BHfJmS%2FpDffEQMmjgwtA%3D&reserved=0> | http://www.twitter.com/audriga<https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.twitter.com%2Faudriga&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784766021%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=vgSUJ094o2Aj%2FVF0paV%2BAzNfAF7hjYjVaEdM4C1ex%2BU%3D&reserved=0>
>>
>> --------------------------------------------------------------------------
>> audriga GmbH |  Alter Schlachthof 57  | 76137 Karlsruhe
>> Sitz der Gesellschaft: Karlsruhe - Amtsgericht Mannheim - HRB 713034
>> Geschäftsführer: Dr. Frank Dengler, Dr.-Ing. Hans-Jörg Happel
>> --------------------------------------------------------------------------
>>
>> _______________________________________________
>> scim mailing list
>> [e-mail]<mailto:[e-mail]>
>> https://www.ietf.org/mailman/listinfo/scim<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fscim&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784766021%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=pyHNXHr9CNBGOkWQyCAmCgRcIj1EOoYWnBJtrZtDrRE%3D&reserved=0>
>
> _______________________________________________
> scim mailing list
> [e-mail]<mailto:[e-mail]>
> https://www.ietf.org/mailman/listinfo/scim<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fscim&data=05%7C01%7CDanny.Zollner%40microsoft.com%7C34be65f95ea848137f1908daa64f1107%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638005155784766021%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=pyHNXHr9CNBGOkWQyCAmCgRcIj1EOoYWnBJtrZtDrRE%3D&reserved=0>