Re: [scim] Query parameter to include attributes in result that are not returned by default

Phil Hunt <phil.hunt@oracle.com> Wed, 10 April 2019 19:55 UTC

Return-Path: <phil.hunt@oracle.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF0D71200CE for <scim@ietfa.amsl.com>; Wed, 10 Apr 2019 12:55:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.299
X-Spam-Level:
X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xrm8xIajtQC4 for <scim@ietfa.amsl.com>; Wed, 10 Apr 2019 12:55:43 -0700 (PDT)
Received: from userp2130.oracle.com (userp2130.oracle.com [156.151.31.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 495831200B7 for <scim@ietf.org>; Wed, 10 Apr 2019 12:55:43 -0700 (PDT)
Received: from pps.filterd (userp2130.oracle.com [127.0.0.1]) by userp2130.oracle.com (8.16.0.27/8.16.0.27) with SMTP id x3AJnH77184724; Wed, 10 Apr 2019 19:55:41 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=corp-2018-07-02; bh=3hzCLAIvMVQCBavQ1sVPgIFIWtxql37pcNIq66/Af00=; b=QfM8ElJUSOXAdfHiKeslxPWgQVVtR40uArcQxCyuA8sscM5xX+xGWbfyE45slJq0A4La mH/Y2YTQfWVa4+A2XLgUyxfbNxk7+XJRutIl4a89k5toe5TWpFwR6MolQca2ZS7vpM22 m6dNZhV1Ub54U0vGR7AHKIzMCtWH4QfoMA03obK8B0ecdY/epsPnV/mg63BBCR5acpaY p6q0u30QzuKEkHL2bCuD8xb4SNZxODA0m8kl4aWBzj7HvxgKg3z959rL2e6r92NoEsFa 1YXHJ6WrKLqa0YuoF/2Yjfz6/dquBv7JzMWur0hC60huEqkc6qp1/Pn65WKFfSMRazIW BQ==
Received: from userp3030.oracle.com (userp3030.oracle.com [156.151.31.80]) by userp2130.oracle.com with ESMTP id 2rpkht57wu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 10 Apr 2019 19:55:41 +0000
Received: from pps.filterd (userp3030.oracle.com [127.0.0.1]) by userp3030.oracle.com (8.16.0.27/8.16.0.27) with SMTP id x3AJsVga174282; Wed, 10 Apr 2019 19:55:41 GMT
Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by userp3030.oracle.com with ESMTP id 2rph7td7b3-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 10 Apr 2019 19:55:41 +0000
Received: from abhmp0008.oracle.com (abhmp0008.oracle.com [141.146.116.14]) by userv0121.oracle.com (8.14.4/8.13.8) with ESMTP id x3AJtelI020851; Wed, 10 Apr 2019 19:55:40 GMT
Received: from dhcp-10-65-183-198.vpn.oracle.com (/10.65.183.198) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 10 Apr 2019 12:55:40 -0700
From: Phil Hunt <phil.hunt@oracle.com>
Message-Id: <82F35A12-51BC-4EAD-AA01-A1842DD7BFCC@oracle.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_22ACF17E-C127-4184-AD94-FE89F5CC2EFC"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Date: Wed, 10 Apr 2019 12:55:38 -0700
In-Reply-To: <CAKCnT7xOPMf3214wO249Yf_Sy91c6izJunvp0v=iyn3eAyJvCQ@mail.gmail.com>
Cc: scim@ietf.org
To: Aleksey Chernoraenko <achernoraenko@gmail.com>
References: <CAKCnT7xOPMf3214wO249Yf_Sy91c6izJunvp0v=iyn3eAyJvCQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3445.9.1)
X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=9223 signatures=668685
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904100129
X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=9223 signatures=668685
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904100129
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/yXX0TyNwt_OabR0BfYp85MbjXZo>
Subject: Re: [scim] Query parameter to include attributes in result that are not returned by default
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Apr 2019 19:55:46 -0000

Aleksey,

As far as changing the protocol, the spec is published and cannot be altered (see IETF publication process) unless a new WG is chartered to begin working on new SCIM RFCs.

In practice, people specify a list of all the attributes they want which may include attributes not normally returned by default. 

Also, this certainly something a client tool could do to make the user experience better. However, in the protocol, the client would have to list all the attributes wanted to get what you want.

Regards,

Phil Hunt 






> On Apr 10, 2019, at 9:38 AM, Aleksey Chernoraenko <achernoraenko@gmail.com> wrote:
> 
> Greetings,
> 
> "attributes" and "excludedAttributes" query parameters as described in
> 3.4.3. section of rfc7644 allow to support at least two scenarios
> 
> 1) when requestor wants to exclude attributes that are returned by
> default (e.g. expensive, or "not interested in" ones, etc)
> 
> 2) when requestor wants to get a specific set of attributes and by
> that overrides defaults
> 
> but it looks like another valuable scenario is missing:
> 3) when requestor wants to include attributes that are not returned by
> default ("returned" schema attribute would be "request" for such
> attributes) without discarding the defaults of other attributes.
> 
> Would introducing "includedAttributes" parameter be a good idea?
> Any thoughts?
> 
> Thanks,
> Alexei
> 
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_scim&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=fqza63xS12PGFgfuW40qHtTxmp6SJbP0J638fkUMCZg&s=EhCjhUQmDOX1KUIULcX-RWc4Fr0RuvZm015XdO6e1fc&e=