IBM Security Verify

 View Only
  • 1.  ISAM 9 SCIM remove group Member

    Posted Wed August 14, 2019 10:03 AM
    Hi all,

    did anybody use the swim interface to manage groups? I wonder how to use the path statement with operation remove. Using something like "path": "members [display eq bjensen]" results in an error like  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:Error"
    ],
    "scimType": "noTarget",
    "detail": "SCIIS0009E An unknown attribute, 'members ', has been specified.",
    "status": "400"

    querying the group comes back with this result:
    {
    "totalResults": 1,
    "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:ListResponse"
    ],
    "Resources": [
    {
    "meta": {
    "location": "https://aac:8443/scim/Groups/cm9sbGUx",
    "resourceType": "Group"
    },
    "members": [
    {
    "display": "bjensen2"
    },
    {
    "display": "bjensen"
    }
    ],
    "id": "cm9sbGUx"
    }
    ]
    }

    looking at the schema, members is an attribute of group, so can anybody tell me what's wrong with the request?

    ------------------------------
    Jens Petersen
    ------------------------------


  • 2.  RE: ISAM 9 SCIM remove group Member

    Posted Thu August 22, 2019 12:54 AM

    From @Jasmine Smith​ :

    Hi Jens,

    It looks like there is an accidental space between 'members' and the square bracket.

    Will error:
    "path": "members [display eq bjensen]"

    Working:
    "path": "members[display eq bjensen]"



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 3.  RE: ISAM 9 SCIM remove group Member

    Posted Thu August 22, 2019 04:30 AM
    Thank's Shane. That was taking me nearly a day. It's again a pleasure working with you.

    Unfortunately "display" is not supported as filter. You need to work with "value", as with several other SCIM requests. That makes scim a bit nasty as you won't know "value". So one must search it calling the object you want to address first.

    -Jens

    ------------------------------
    Jens Petersen
    ------------------------------



  • 4.  RE: ISAM 9 SCIM remove group Member

    Posted Thu August 22, 2019 09:21 AM
    Edited by Jasmine Smith Thu August 22, 2019 05:43 PM
    Edit: I originally tried to post this before Shane's reply, however it was probably put in to an approval queue since it was my first time relying to a post here.

    Hi Jens,

    It looks as though you have an extra space between 'members' and the square bracket:

    "path": "members [display eq bjensen]"

    vs
    "path": "members[display eq bjensen]"


    ------------------------------
    Jasmine SMITH
    ------------------------------