Re: [scim] How to check isUsernameExist for Self Sign Up

Gayan,

Keep in mind SCIM is just a RESTful api. There are no functional methods like isUsernameExist.

You can…

1.  Just try HTTP POST to create the user and if there is a conflict, it gets rejected.  This is probably easiest.

2.  Use GET /Users?filter="(userName eq \”val\”)”&attributes=id.  If you can no records return there were no matches. If you get a return, it is in use.  Note, either way, you will get a successful response.

Note, I suspect it is possible that despite checking with #2, you might still get a rejection when you POST. This might be due to a reserve or lock on the username or other identifier.

Your rights as an administrative client will also impact what you get back with the query in particular.  For example, if you are querying anonymously, you might get no matches because the service provider has determined it is not going to answer your and confirm presence or not of the match.

Likewise, many service providers will have DoS and other security restrictions on what clients can register.  

E.g. to moderate the need for “anonymous” registration, a mobile app could register with the service provider to obtain a “public” OAuth client credential that gives the mobile client the right to register a new user profile on behalf of the user (e.g. by using profile data from the mobile phone).

Phil

Oracle Corporation, Identity Cloud Services & Identity Standards
@independentid
www.independentid.com <http://www.independentid.com/>phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>

> On Feb 2, 2017, at 10:18 AM, Gayan Gunawardana <gayan@wso2.com> wrote:
> 
> Hello,
> 
> According to [1] self sign up can be achieved via sending authenticated request to /Me. 
> 
> What is the proper way to check isUsernameExist before self sign up ?
>   
> [1]https://tools.ietf.org/html/rfc7644#section-3.11 <https://tools.ietf.org/html/rfc7644#section-3.11>
> 
> Thanks,
> Gayan
> -- 
> Gayan Gunawardana
> Software Engineer; WSO2 Inc.; http://wso2.com/ <http://wso2.com/>
> Email: gayan@wso2.com <mailto:gayan@wso2.com> 
> Mobile: +94 (71) 8020933
>  <>_______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim