IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  ISAM AAC SCIM: enhanced user schema support

    Posted Thu January 10, 2019 03:32 PM
    Hello,

    I am running in to some issues with leveraging the SCIM Server component, offered as part of ISAM AAC.

    Multiple singular and multi-value attributes for the core urn:ietf:params:scim:schemas:core:2.0:User schema do not seem to be supported, which are specified RFC 7643.

    As I did notice some work being planned for SCIM, are there plans being made to enhance support for these currently missing attributes in the schema?

    Thanks and regards,

    Abdel Hamrioui

    https://tools.ietf.org/html/rfc7643

    https://www.ibm.com/support/knowledgecenter/en/SSPREK_9.0.6/com.ibm.isam.doc/admin/concept/con_scim_resource_schema.html

    ------------------------------
    Abdel Hamrioui
    ------------------------------


  • 2.  RE: ISAM AAC SCIM: enhanced user schema support

    Posted Fri January 11, 2019 11:14 AM
    Hello Abdel,

    There was work done in this area that has been put into the 9.0.6.0 firmware version of ISAM.
    Please upgrade to that firmware and confirm that the attributes you are referring to are fixed as expected.

    Specifically, the following APARs relate :
    http://www-01.ibm.com/support/docview.wss?uid=swg1IJ11217

    ------------------------------
    JACK YARBOROUGH
    ------------------------------



  • 3.  RE: ISAM AAC SCIM: enhanced user schema support

    Posted Mon January 14, 2019 03:48 AM
    Hi Jack,

    Thanks for your response. I am actually running in to problems with 9.0.6 where some multi-value group attributes do not seem to be accepted (https://tools.ietf.org/html/rfc7643#section-4.1.2).
    For example, the groups attribute is not being accepted.

    I expect an RFE is needed for this, but I would like to double-check if im not missing anything here

    Kind regards,

    Abdel Hamrioui

    ------------------------------
    Abdel Hamrioui
    ------------------------------