I am using SCIM. One of the endpoints allows users to change their attributes, including phone, and more.
I you attempt to change your own password using /scim/Me, and for some reason you can't do it, perhaps you fail to comply with the password policy, AND you close your session, without completing successfully the changing of your password, you will no longer be able to login, even with the last password.

Can someone please double check if this is not just me?
I opened a ticket with IBM support team, and here is their answer:
"Yes, this is working as designed. If you want to change the behavior, then it needs to be pursued in an enhancement request (not a support case)."

I found this a poor design, and I still question whether this is an issue with my implementation or if fact it is a ISVA feature, although IBM support confirmed it is?

Thanks

------------------------------
Joao Goncalves
Pyxis, Lda.
+351 91 721 4994
------------------------------

I just had a second confirmation that this is indeed the way it works.

So, I need to find a workaround this. My ideas are the following:

• If the user that wants to change his own password, and fails to do so, he has no other option but to use the USC Reset Password flow!
• Do not put any restriction on the password, so the user can use any password, so there will be no failures.
• If the user does not succeed changing his password, the scim administrator can generate one, and send the user the new password, and now he can attempt again to change the password.

Any more ideas?

------------------------------
Joao Goncalves
Pyxis, Lda.
Sintra
+351 91 721 4994
------------------------------