[scim] Re: [Technical Errata Reported] RFC7643 (8475)

[Phil Hunt <[e-mail]>]

I finally had time to look at this.  

VERIFIED.

Apologies for the delay.  


Phil Hunt
[e-mail]



> On Jun 20, 2025, at 8:11 AM, RFC Errata System <[e-mail]> wrote:
> 
> The following errata report has been submitted for RFC7643,
> "System for Cross-domain Identity Management: Core Schema".
> 
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid8475
> 
> --------------------------------------
> Type: Technical
> Reported by: Matthias Winter <[e-mail]>
> 
> Section: 6
> 
> Original Text
> -------------
> Section 6.  ResourceType Schema
> 
>   name
>      The resource type name.  When applicable, service providers MUST
>      specify the name, e.g., "User" or "Group".  This name is
>      referenced by the "meta.resourceType" attribute in all resources.
>      REQUIRED.
> 
> ...
> 
>   endpoint
>      The resource type's HTTP-addressable endpoint relative to the Base
>      URL of the service provider, e.g., "Users".  REQUIRED.
> 
> ---
> 
> Section 8.7.2.  Service Provider Schema Representation
> 
>  {
>    "id" : "urn:ietf:params:scim:schemas:core:2.0:ResourceType",
>    "name" : "ResourceType",
>    "description" : "Specifies the schema that describes a SCIM
>      resource type",
>    "attributes" : [
> ...
>      {
>        "name" : "name",
>        "type" : "string",
>        "multiValued" : false,
>        "description" : "The resource type name.  When applicable,
>          service providers MUST specify the name, e.g., 'User'.",
>        "required" : true,
>        "caseExact" : false,
>        "mutability" : "readOnly",
>        "returned" : "default",
>        "uniqueness" : "none"
>      },
> ...
>      {
>        "name" : "endpoint",
>        "type" : "reference",
>        "referenceTypes" : ["uri"],
>        "multiValued" : false,
>        "description" : "The resource type's HTTP-addressable
>          endpoint relative to the Base URL, e.g., '/Users'.",
>        "required" : true,
>        "caseExact" : false,
>        "mutability" : "readOnly",
>        "returned" : "default",
>        "uniqueness" : "none"
>      },
> 
> Corrected Text
> --------------
> Section 6.  ResourceType Schema
> 
>   name
>      The resource type name.  When applicable, service providers MUST
>      specify the name, e.g., "User" or "Group".  This name is
>      referenced by the "meta.resourceType" attribute in all resources.
>      This attribute has a "uniqueness" of "server" and is case-exact.
>      REQUIRED
> 
> ...
> 
>   endpoint
>      The resource type's HTTP-addressable endpoint relative to the Base
>      URL of the service provider, e.g., "Users".  This attribute has a
>      "uniqueness" of "server" and is case-exact.  REQUIRED
> 
> ---
> 
> Section 8.7.2.  Service Provider Schema Representation
> 
>  {
>    "id" : "urn:ietf:params:scim:schemas:core:2.0:ResourceType",
>    "name" : "ResourceType",
>    "description" : "Specifies the schema that describes a SCIM
>      resource type",
>    "attributes" : [
>      {
>        "name" : "name",
>        "type" : "string",
>        "multiValued" : false,
>        "description" : "The resource type name.  Service providers MUST
>          specify the name, e.g., "User" or "Group".",
>        "required" : true,
>        "caseExact" : true,
>        "mutability" : "readOnly",
>        "returned" : "default",
>        "uniqueness" : "server"
>      },
> ...
>      {
>        "name" : "endpoint",
>        "type" : "reference",
>        "referenceTypes" : ["uri"],
>        "multiValued" : false,
>        "description" : "The resource type's HTTP-addressable
>          endpoint relative to the Base URL, e.g., '/Users'.",
>        "required" : true,
>        "caseExact" : true,
>        "mutability" : "readOnly",
>        "returned" : "default",
>        "uniqueness" : "server"
>      },
> 
> Notes
> -----
> The attributes "name" and "endpoint" in the ResourceType schema must have a "uniqueness" of "server" and be case-exact.
> 
> Case-exact:
> The attributes "name" and "endpoint" are both used in references (e.g. "{base-url}/ResourceTypes/{name}" and "{base-url}/{endpoint}/{id}"). References are defined as case-exact in section 2.3.7. Therefore, both attributes must also be case-exact.
> This should also be reflected in section 8.7.2
> 
> Uniqueness:
> For the uniqueness of "name" see Errata ID: 8362.
> For "endpoint" the change makes it explicit that each endpoint should provide exactly one type of resource. I do not see any point in RFC 7644 or RFC 7643 that currently forbids using the same endpoint for several resource types, but this would not work when creating resources. Clients cannot specify which resource type they want to create; they can only specify the endpoint and schema.
> This should also be reflected in section 8.7.2 (see Errata ID: 8366)
> 
> Instructions:
> -------------
> This erratum is currently posted as "Reported". (If it is spam, it 
> will be removed shortly by the RFC Production Center.) Please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party  
> will log in to change the status and edit the report, if necessary.
> 
> --------------------------------------
> RFC7643 (draft-ietf-scim-core-schema-22)
> --------------------------------------
> Title               : System for Cross-domain Identity Management: Core Schema
> Publication Date    : September 2015
> Author(s)           : P. Hunt, Ed., K. Grizzle, E. Wahlstroem, C. Mortimore
> Category            : PROPOSED STANDARD
> Source              : System for Cross-domain Identity Management
> Stream              : IETF
> Verifying Party     : IESG