Re: [scim] April 7 Meetup Agenda

Phil Hunt <> Wed, 07 April 2021 16:18 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 0CAC23A1F8E for <>; Wed, 7 Apr 2021 09:18:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (2048-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id jPHLz4yWAlqC for <>; Wed, 7 Apr 2021 09:18:32 -0700 (PDT)
Received: from ( [IPv6:2607:f8b0:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 6E2C83A1F8D for <>; Wed, 7 Apr 2021 09:18:32 -0700 (PDT)
Received: by with SMTP id g35so8679546pgg.9 for <>; Wed, 07 Apr 2021 09:18:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=eSPgzVOQHZq3MKqiXl8KFJwz8BubOZphWcz/01Jx4KY=; b=yLnFnSy7EsQKqO3M/8wnwKjX3F/tjvSEJ6rg+/lVfoNBlwd7yI0Stp7r6FGIsoB80z L2jngsn17ITuUb+wDIDxa2ydgq40r0pL+vvyIcFNemMgEFEygW1fidghd33TAwIERBiX z49Ly3wb2kmp4+6tHylsePQHSxHNh2reDek0OwfnqWtGjc0l1Jtw4CduQcv/KDEg39Km /ax7cGPPUz0d6qi7YJ3lKXI7j7tU7bPnwcZdi0sl/T/pN3nQDiEMYyD2Kvx6/k1sfr6I h3acyRs9vNnGozuVqwGZYOjgEeXvP/CCgjJF/YkJHAjyZzVXaP3/cXDAVz5shV0iTOlD Z8Rg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=eSPgzVOQHZq3MKqiXl8KFJwz8BubOZphWcz/01Jx4KY=; b=V2CAiXjnw/4TQlWV21JlAxdeD3j0neDFQJsikaP5ova334pDdAFDCKq7EM1t4Wn5HR TTuheddpvApFnJQA1GkdHiG+SSg0uRquwN5HSKkH3FNVT8E3xR9DCrW2DIRs1gnfpf4v y8x7ZARo4TwhE39Mm6zCcvU0RcdtYTcReEB76GpH2DuspCC2tX6xad/ERq/E4EUe6VpZ /ydBy/v259n/rP+JEbVg5v1jhqj/J36VdVkD0ZsQE4wMCbaX+IjqViEESyu+wDh2EgXL 785aCGT3yKluj+Vn2mIwi5zqim11fAG2qK+S2JCT0zxJjbCrsnnQn1AuWfQN9mIyCuKW OxLw==
X-Gm-Message-State: AOAM530d3QBVZS8pJBcfeM7dJ0dkKOPU91lQQ+u8A6sikCwKXObB3bHS ahlf4QLQRZQXgg5weTnXp0eP/C4s4+vqLrX5
X-Google-Smtp-Source: ABdhPJxdO6XAwQwqHoOsiCsfZDybDTdzapkVABkdHFniy+Njg0/lX64TgwO48QhyAhuNgVj0JWxJkw==
X-Received: by 2002:a63:508:: with SMTP id 8mr4044982pgf.220.1617812311231; Wed, 07 Apr 2021 09:18:31 -0700 (PDT)
Received: from ( [2001:569:7a71:1d00:39be:5611:b864:6dcf]) by with ESMTPSA id c2sm22256149pfb.121.2021. (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Apr 2021 09:18:30 -0700 (PDT)
From: Phil Hunt <>
Message-Id: <>
Content-Type: multipart/alternative; boundary="Apple-Mail=_ED2A28E5-AEDC-4203-854F-9F4BEDF83041"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.\))
Date: Wed, 07 Apr 2021 09:18:29 -0700
In-Reply-To: <>
Cc: "" <>
To: Pamela Dingle <>
References: <>
X-Mailer: Apple Mail (2.3654.
Archived-At: <>
Subject: Re: [scim] April 7 Meetup Agenda
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Simple Cloud Identity Management BOF <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Wed, 07 Apr 2021 16:18:37 -0000

Regarding the discussion of the current draft proposals, the MV paging draft was originally designed to facilitate paging of large groups.

However, what I think is useful about the draft is it extends SCIM to allow both filters and paging parameters on attribute qualifiers.

It is handy if for example you want to return only specific value instances of a CMVA.  For example in PAM you could return only values of a specific credential type. In the draft, there is an example returning only work email addresses as a simple example.

GET /Users/2819c223-7f76-453a-919d-413861904646?
     attributes=*,emails[type eq \"work\"]

In the normal SCIM protocol, a filters and paging params are used to qualify which resources are returned.  In this draft extension, filters and paging params may be used to qualify which values returned.

I mention this, because the draft may be of broader use then just group paging.  If there is interest, I am happy to keep working on it.

Phil Hunt

> On Apr 7, 2021, at 7:08 AM, Pamela Dingle <> wrote:
> Hi all,
> Our agenda for today's bi-weekly meeting at 8am PT will start with a review of the ietf scim PAM (privileged access management) draft as well as to look at the spreadsheet that you all might remember from a previous meetup.
> Also - I believe I now have a calendar setup that can be exported to a .ics file and therefore reliably imported by you all.  That .ics link is going into our github repo, which is also where our notes will live and so we can start posting links to calendars, agendas, and notes with ease. 
> For now, here is the calendar link and also the teams link: 
> Calendar ICS: <>
> Calendar HTML: <>
> Teams: Click here to join the meeting <>
> _______________________________________________
> scim mailing list
> <>
> <>