[scim] How to patch multi-valued nested attributes?

[Aleksey Chernoraenko <[e-mail]>]

Hello,

In our SCIM Resource Provider we have resources that have the nested
multi-valued attributes. It looks like this:
GET /GroupSets/98ae2a7c-40a5-4fff-b59a-5b922908239e
{    ...
    "name": "collection #1",
    "groups": [ {
        "value": "a0115001-0fd7-4b50-b7b4-ac29d57cc623",
        "$ref": ".../groups/a0115001-0fd7-4b50-b7b4-ac29d57cc623",
        ...
        }, ...
    ], ...
}

We use groups endpoint when we update group members, like
PATCH /Groups/a0115001-0fd7-4b50-b7b4-ac29d57cc623
{   ...
    "operations": [ {
        "op": "add", "path": "members", "value":
"db81119f-5ee0-464e-b7e3-51573b62b56a"
        } ]
}

I understand how the request should look like if I want to update one group
members via parent (groupset) endpoint:
PATCH /GroupSets/98ae2a7c-40a5-4fff-b59a-5b922908239e
{   ...
    "operations": [ {
        "op": "add", "path": "groups[value eq
\"a0115001-0fd7-4b50-b7b4-ac29d57cc623\"].members", ...
        } ]
}

but wonder how I can specify "members" from all or a filtered set of
"groups" without enumeration all of them on client side?

The path value might look like "groups[].members", or "groups[*].members",
or even "groups.members".

It seems that the spec leaves this question open. What should or can happen
if more than one group would be found?

---
Thank you,
Alexei