IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  ISAM 9 SCIM remove group Member

    Posted Wed August 14, 2019 10:03 AM
    Hi all,

    did anybody use the swim interface to manage groups? I wonder how to use the path statement with operation remove. Using something like "path": "members [display eq bjensen]" results in an error like  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:Error"
    ],
    "scimType": "noTarget",
    "detail": "SCIIS0009E An unknown attribute, 'members ', has been specified.",
    "status": "400"

    querying the group comes back with this result:
    {
    "totalResults": 1,
    "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:ListResponse"
    ],
    "Resources": [
    {
    "meta": {
    "location": "https://aac:8443/scim/Groups/cm9sbGUx",
    "resourceType": "Group"
    },
    "members": [
    {
    "display": "bjensen2"
    },
    {
    "display": "bjensen"
    }
    ],
    "id": "cm9sbGUx"
    }
    ]
    }

    looking at the schema, members is an attribute of group, so can anybody tell me what's wrong with the request?

    ------------------------------
    Jens Petersen
    ------------------------------


  • 2.  RE: ISAM 9 SCIM remove group Member

    Posted Thu August 22, 2019 12:54 AM

    From @Jasmine Smith​ :

    Hi Jens,

    It looks like there is an accidental space between 'members' and the square bracket.

    Will error:
    "path": "members [display eq bjensen]"

    Working:
    "path": "members[display eq bjensen]"



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------

    Original Message


  • 3.  RE: ISAM 9 SCIM remove group Member

    Posted Thu August 22, 2019 04:30 AM
    Thank's Shane. That was taking me nearly a day. It's again a pleasure working with you.

    Unfortunately "display" is not supported as filter. You need to work with "value", as with several other SCIM requests. That makes scim a bit nasty as you won't know "value". So one must search it calling the object you want to address first.

    -Jens

    ------------------------------
    Jens Petersen
    ------------------------------

    Original Message


  • 4.  RE: ISAM 9 SCIM remove group Member

    Posted Thu August 22, 2019 09:21 AM
    Edited by Jasmine Smith Thu August 22, 2019 05:43 PM
    Edit: I originally tried to post this before Shane's reply, however it was probably put in to an approval queue since it was my first time relying to a post here.

    Hi Jens,

    It looks as though you have an extra space between 'members' and the square bracket:

    "path": "members [display eq bjensen]"​

    vs
    "path": "members[display eq bjensen]"​


    ------------------------------
    Jasmine SMITH
    ------------------------------

    Original Message