Re: [scim] Pagination for large ​multi-valued attributes

Kelly Grizzle <kelly.grizzle@sailpoint.com> Wed, 07 February 2018 16:27 UTC

Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E3D712E043 for <scim@ietfa.amsl.com>; Wed, 7 Feb 2018 08:27:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sailpoint.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C_8folgYjFpX for <scim@ietfa.amsl.com>; Wed, 7 Feb 2018 08:27:14 -0800 (PST)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0134.outbound.protection.outlook.com [104.47.34.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A03F712E042 for <scim@ietf.org>; Wed, 7 Feb 2018 08:27:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sailpoint.onmicrosoft.com; s=selector1-sailpoint-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=yUwqwYj/LzatIUVCxjWrMH2TAWnq2QtxAMHpTx8/GHE=; b=PEhaaSwfeljpY5sDrBbrb75GxXfVWzo0mgoi+uD8Wsub55nESBXKl1RVQOoukJsQcChsv2QW0wEP7Bs+f3katYuPQOd2QGgaw/5WiRyL6XTzwvItEjVLbrA/KR/+zlHIBSJx3KIe2OuIFsweyk4OQqgzNxcblQs90x5wwv2ThRo=
Received: from BN6PR04MB0339.namprd04.prod.outlook.com (10.168.225.20) by BN6PR04MB0898.namprd04.prod.outlook.com (10.174.95.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.485.10; Wed, 7 Feb 2018 16:27:10 +0000
Received: from BN6PR04MB0339.namprd04.prod.outlook.com ([10.168.225.20]) by BN6PR04MB0339.namprd04.prod.outlook.com ([10.168.225.20]) with mapi id 15.20.0464.012; Wed, 7 Feb 2018 16:27:10 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Aleksey Chernoraenko <achernoraenko@gmail.com>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] Pagination for large ​multi-valued attributes
Thread-Index: AQHTn4X3vM15a5PZF0WfCZANqrJVD6OZIJ1w
Date: Wed, 07 Feb 2018 16:27:10 +0000
Message-ID: <BN6PR04MB0339DA4DEAD2F499398CE612E2FC0@BN6PR04MB0339.namprd04.prod.outlook.com>
References: <CAKCnT7yU5-8Gn2B6Mu=SGoDtAkgSvgSOotXhdAqp7TUa0g_Zxg@mail.gmail.com>
In-Reply-To: <CAKCnT7yU5-8Gn2B6Mu=SGoDtAkgSvgSOotXhdAqp7TUa0g_Zxg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=kelly.grizzle@sailpoint.com;
x-originating-ip: [70.114.154.180]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BN6PR04MB0898; 7:tZD15pAqWBR2j4Jmh4yDjkc4yMgLHaReD99lcRoOa9Pb37VAV2XiyXLlmDyghZ3ikxK9gFuZ4ckjJjr2jEYz5s/plLUXIDdVluBjlHCixj+39vBOcPzdDcxP9YxP+9FQJ0eM0ELgaV6D7rbM0F0YwVa5bCY/ESi3fUhb5lTA6ulCoI7zWl3Xeiqe1m4CuHesL7A81ZbKlFXpvmTAGGoMdOfs0rOzfw7ia1U8QoO74JKynoY1UiItWPwbc//VZ7Qg
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: c5280c7f-cea6-4f73-b3a5-08d56e47a353
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:BN6PR04MB0898;
x-ms-traffictypediagnostic: BN6PR04MB0898:
x-microsoft-antispam-prvs: <BN6PR04MB089829BF7E8093D82C8E46B0E2FC0@BN6PR04MB0898.namprd04.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231101)(2400082)(944501161)(93006095)(93001095)(6041288)(20161123564045)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:BN6PR04MB0898; BCL:0; PCL:0; RULEID:; SRVR:BN6PR04MB0898;
x-forefront-prvs: 0576145E86
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39380400002)(376002)(39850400004)(396003)(346002)(199004)(189003)(77096007)(478600001)(102836004)(2906002)(39060400002)(33656002)(53546011)(5660300001)(59450400001)(6506007)(55016002)(74316002)(6116002)(790700001)(6436002)(7736002)(76176011)(6246003)(3280700002)(53936002)(7696005)(3660700001)(106356001)(54896002)(6306002)(66066001)(26005)(9686003)(229853002)(3846002)(2900100001)(14454004)(186003)(81156014)(81166006)(8936002)(105586002)(99286004)(68736007)(2501003)(97736004)(316002)(86362001)(2950100002)(25786009)(110136005); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR04MB0898; H:BN6PR04MB0339.namprd04.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: sailpoint.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: dr34NStngRKhlWKlIhpN8qxoT6x+hp2vXdDSLMo/srCeKmpHX20/1t4yl7rXip5OsvOc0Ey0y+UDaS1kT84pJQ==
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR04MB0339DA4DEAD2F499398CE612E2FC0BN6PR04MB0339namp_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c5280c7f-cea6-4f73-b3a5-08d56e47a353
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2018 16:27:10.3292 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR04MB0898
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/zeLzar2VH0kgGH9ho5BipPV-6m4>
Subject: Re: [scim] Pagination for large ​multi-valued attributes
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Feb 2018 16:27:20 -0000

Hi Alexei – No there is a not a draft or plan to address this currently.  It has been discussed, and the working group decided for now that service providers can use a “returned” value of “request” for large attributes such as this.  This prevents the full value from being returned on most calls, but does not give a great solution if you want to retrieve the full list.

Also, this is one of the problems that the PATCH operation is trying to address.  This allows clients to update large attributes (adding or removing values) without having to read the entire attribute.

--Kelly

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Aleksey Chernoraenko
Sent: Tuesday, February 6, 2018 2:06 PM
To: scim@ietf.org
Subject: [scim] Pagination for large ​multi-valued attributes

​​
Hello,

SCIM defines "startIndex" and "count" pagination query parameters that allow to control the amount of returned resources.

SCIM protocol seems to represent pagination only for top level resources (e.g. /Users?startIndex=2&count=10) and does not address pagination for multi-valued attributes, like group membership.

Are there any plans/draft or recommendations how to handle such use cases?

---
Thank you,
Alexei