Comments (3)
xgp
commented on August 15, 2024
Also, another, for a user PATCH:
Request:
{
"Operations": [
{
"op": "replace",
"path": "emails[type eq \"untyped\"].value",
"value": "[email protected]"
},
{
"op": "replace",
"path": "emails[type eq \"untyped\"].display",
"value": "I27XLHK4TLTG"
},
{
"op": "replace",
"path": "emails[type eq \"untyped\"].primary",
"value": true
},
{
"op": "replace",
"path": "phoneNumbers[type eq \"untyped\"].value",
"value": "1-991-663-8763"
},
{
"op": "replace",
"path": "phoneNumbers[type eq \"untyped\"].display",
"value": "(233)436-8890 x43220"
},
{
"op": "replace",
"path": "phoneNumbers[type eq \"untyped\"].primary",
"value": "1-648-081-5815 x2534"
},
{
"op": "replace",
"path": "ims[type eq \"untyped\"].value",
"value": "ALJ7NB0U3625"
},
{
"op": "replace",
"path": "ims[type eq \"untyped\"].display",
"value": "VAE88FFVH24Z"
},
{
"op": "replace",
"path": "ims[type eq \"untyped\"].primary",
"value": true
},
{
"op": "replace",
"path": "photos[type eq \"untyped\"].display",
"value": "HK8T4HCWBHSN"
},
{
"op": "replace",
"path": "photos[type eq \"untyped\"].primary",
"value": true
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].formatted",
"value": "RJZL3DFWSX3M"
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].streetAddress",
"value": "203 William Spring"
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].locality",
"value": "YPG6U4Y62YBL"
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].region",
"value": "KBH01PEGFB4O"
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].postalCode",
"value": "rz5 9oz"
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].country",
"value": "San Marino"
},
{
"op": "replace",
"path": "addresses[type eq \"untyped\"].primary",
"value": true
},
{
"op": "replace",
"path": "groups[type eq \"untyped\"].value",
"value": "LVY2CRZVPQ1C"
},
{
"op": "replace",
"path": "groups[type eq \"untyped\"].display",
"value": "S1902RI36DWM"
},
{
"op": "replace",
"path": "entitlements[type eq \"untyped\"].value",
"value": "MH2F7VCC2E5C"
},
{
"op": "replace",
"path": "entitlements[type eq \"untyped\"].primary",
"value": true
},
{
"op": "replace",
"path": "roles[type eq \"untyped\"].value",
"value": "J5J65R9GFGRU"
},
{
"op": "replace",
"path": "roles[type eq \"untyped\"].primary",
"value": true
},
{
"op": "replace",
"path": "x509Certificates[type eq \"untyped\"].value",
"value": "D0EINU3RIKLP"
},
{
"op": "replace",
"path": "x509Certificates[type eq \"untyped\"].primary",
"value": false
},
{
"op": "replace",
"value": {
"externalId": "b4027c7f-3364-40e2-8721-417cf8a1d563",
"userName": "[email protected]",
"name.formatted": "Gregoria",
"name.familyName": "Kyleigh",
"name.givenName": "Stanford",
"name.middleName": "Norval",
"name.honorificPrefix": "John",
"name.honorificSuffix": "Walter",
"displayName": "EJ32J8CFWNKC",
"nickName": "ZRMV4MF1KZJW",
"title": "QZTG6EQDRQPL",
"userType": "PLZCH50V7U6Q",
"preferredLanguage": "RIELRC95A12F",
"locale": "5GY8Y9XNXTFT",
"timezone": "IW7ZVVHJNLR3",
"active": true,
"password": "NB8VAD5IGUV3",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber": "0CNCYZKJIAW3",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:costCenter": "GUK6L75W3QY7",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization": "AA7UW5OE03YT",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division": "C6ANAVFC53ZK",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department": "JZ6XPUFR8V5N",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager.displayName": "VYFA294OD19D"
}
}
],
"schemas": [
"urn:ietf:params:scim:api:messages:2.0:PatchOp"
]
}Response:
{
"detail": "No target found for path-filter 'emails[type eq \"untyped\"].value'",
"schemas": [
"urn:ietf:params:scim:api:messages:2.0:Error"
],
"scimType": "noTarget",
"status": 400
}from scim-for-keycloak.
Captain-P-Goldfish
commented on August 15, 2024
it should be possible to fix this problem by changing the users-schema.
In my opinion the behaviour is wrong though. A boolean node should not be handled like a string. But it should be possible to work around this by changing the roles.primary attribute to type string.
What are you expecting on the replace operation? The RFC clearly states how the replace action should be handled:
RFC7644 chapter 3.5.2.3
If the target location is a multi-valued attribute for which a
value selection filter ("valuePath") has been supplied and no
record match was made, the service provider SHALL indicate failure
by returning HTTP status code 400 and a "scimType" error code of
"noTarget".
from the look ms-azure is expecting another behaviour. This would require an explicit work around within the SCIM-SDK
from scim-for-keycloak.
xgp
commented on August 15, 2024
@Captain-P-Goldfish Thanks for the pointer to the replace operation in the RFC. I couldn't find that, and I was going to send a report/bug to Azure.
from scim-for-keycloak.
Related Issues (20)
- liquibase issues HOT 10
- Seed initial configuration in keycloak HOT 4
- Scim plugin behind reverse proxy that strips a path prefix makes the scim console unaccessible HOT 4
- Feature Request: make isHotDeploying configurable HOT 2
- Attribute named "pattern" in resource schema User under userName Attribute HOT 10
- email not present in response from /Users for kc-20-b1 HOT 3
- how install scim-for-keycloak in keycloak docker HOT 1
- Can this module POST user data to client applications? (like Django or any others) HOT 3
- Role mapping HOT 3
- Affiliation between users and groups synced from AzureAD to keycloak is lost HOT 7
- UMA compatibiliy HOT 11
- [KeyCloak 22-b2] Group Membership is lost in SCIM call, when users are loaded from LDAP. HOT 7
- QA: SCIM Enterprise with multitenancy HOT 3
- Question about SCIM support coverage: Is the SCIM Admin console currently available? HOT 4
- How does SCIM work with External Database? HOT 6
- Issues with free version pre-enterprise HOT 12
- groups on users and members on groups doesn't appear to be exposed via the 2 endpoints. HOT 9
- Search by id seems to be not working HOT 5
- Something maybe missing from the scim endpoint implementation HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scim-for-keycloak.