Re: [scim] User extension for not valid before / after ?

Yoann

Thanks for your input. 

I think there have been two scenarios discussed at various times:

1. Account life cycle schema:  eg the start and end of an account.  Could be new attributes in a new schema extension (like enterprise user works).

2. Attribute metadata. This can be things like verification status, expiry, but for attributes. Was this email verified?  When does a role expire? Etc. 

The first one is easy, the second one needs some thoughts. Eg turning existing simple attributes into complex ones(with sub attributes) and be backwards compatible may be tricky. 

I am talking to a client about this as well, so there does seem to be interest in the issue from several orgs. 

Another thing to think about. Specialized schema that is only used in a single environment does not necessarily need to be standardized or registered in IANA. The question is what is the interop requirement? Does this data need to be shared between domains with different implementations?  

Phil

> On Sep 7, 2022, at 6:58 AM, Yoann Gini <y@bravas.io> wrote:
> 
> 
> Hello,
> 
> I'm new to this mailing list so I will quickly introduce myself. I'm Yoann Gini, CTO of a french startup called Bravas who just raised money to build an MDM+IDP all in once, with a big focus on passwordless and modern management for SMBs.
> 
> One of our main work will be to work with SCIM as server to get identities from HRIS and as client to push them in cascade to all federated services.
> 
> One of the issues we have right now is the need for us to know the validity window of an EnterpriseUser.
> 
> For audit purposes and identity lifecycle we consider that all EnterpriseUser in our solution need to have a some attributes defining the contract start date and end date. Some kind of "not valid before" and "not valid after".
> 
> Which can also be extended in depth with hold window, for example with birth vacations, when someone is not supposed to work for a long period of time but still employed, the not valid before/after dates does not change, but we may want to add an "on hold" overlay for that vacation time.
> 
> This is not covered by User or EnterpriseUser scheme, and I do not see other scheme at all here https://www.iana.org/assignments/scim/scim.xhtml 
> 
> Is this kind of need already covered by a Draft? If yes, where to find it/them? If not, do some people here want to collaborate on something? 
> 
> And since I'm new to this list, if this is not the correct way to question existing work in progress on specific topics like that, let me know how and where I should ask.
> 
> Best regards
> Yoann Gini
> 
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim