Captain-P-Goldfish
commented
1 year ago This is actually not an attribute defined by SCIM. It is a customized attribute added by the underlying SCIM SDK that is used to limit the characters usable for the userName attribute. If this is causing a problem I will fix this for the enterprise version that is released soon. If you are able to build the project scim-for-keycloak project yourself you can fix it for the time being by adding this line of code:
class ScimConfiguration
ResourceType userResourceType = resourceEndpoint.registerEndpoint(new UserEndpointDefinition(new UserHandler()));
userResourceType.setFeatures(ResourceTypeFeatures.builder().autoFiltering(true).autoSorting(true).build());
ScimResourceTypeEntity userResourceTypeEntity = resourceTypeService.getOrCreateResourceTypeEntry(userResourceType);
resourceTypeService.updateResourceType(userResourceType, userResourceTypeEntity);
userResourceType.getSchemaAttribute(AttributeNames.RFC7643.USER_NAME).get().setPattern(null); <--- this line
manju754
We are trying to integrate keycloak with other SCIM provider with keycloak acting as SCIM Server and other provider as SCIM Client. SCIM Client has Users and Groups which needs to be provisioned to Keycloak as part of SCIM.
While we are establishing the connectivity between other provider and keycloak for SCIM Provisioning.
The Other provider is failing with invalid attribute named "pattern" in resource schema User under userName attribute.
I have pasted the sample userName definition for reference.
{ "id": "urn:ietf:params:scim:schemas:core:2.0:User", "name": "User", "description": "User Account", "attributes": [ { "name": "id", "type": "string", "multiValued": false, "description": "Unique identifier for the SCIM Resource as defined by the Service Provider.", "required": true, "caseExact": true, "mutability": "readOnly", "returned": "always", "uniqueness": "server" }, { "name": "externalId", "type": "string", "multiValued": false, "description": "A String that is an identifier for the resource as defined by the provisioning client.The service provider MUST always interpret the externalId as scoped to the provisioning domain.", "required": false, "caseExact": true, "mutability": "readWrite", "returned": "default", "uniqueness": "none" }, { "name": "userName", "type": "string", "multiValued": false, "description": "A service provider's unique identifier for the user, typically\nused by the user to directly authenticate to the service provider.Each User MUST include a non-empty userName value. This identifier\nMUST be unique across the service provider's entire set of Users.", "required": true, "caseExact": false, "mutability": "readWrite", "returned": "default", "uniqueness": "server", *"pattern": "^(?!\s$).+"** },. ot
Is this the valid attribute from SCIM Resource Schema USER?
Does it adhere to RFC standards?
can you shed some light on this ??