search

cloudfoundry / uaa

CloudFoundry User Account and Authentication (UAA) Server
Apache License 2.0
1.59k stars 828 forks source link

CF UAA support for SCIM2.0 as per https://simplecloud.info/#Implementations2 #2550

Open Rohit04061992 opened 1 year ago

Rohit04061992 commented 1 year ago

[no description provided]

cf-gitbot commented 1 year ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/186280117

The labels on this github issue will be updated when the story is started.

Rohit04061992 commented 1 year ago

I am using latest uaa version 76.22.0

strehle commented 1 year ago

You created an isssue but this is a feature request and I doubt that we will provide full 2.0 support with one fix, so do have a concrete issue missing SCIM2.0 where a small or medium fix would help. And if you would provide such a PR we could solve this in a shorter time frame

Rohit04061992 commented 1 year ago

We are trying to configure , ad sync with cf uaa , and when azure ad is invoking uaa apis for syncing the users and groups , uaa is giving error which says it only supports scim1.0 schema

Rohit04061992 commented 1 year ago

In cf uaa for create user api schema is optional , but when someone passes the schema as scim2.0 system breaks , scim 2.0 is defacto standard now , cf uaa should enhance to support this .

@strehle We need basic scim2.0 support for adding users and groups .

Rohit04061992 commented 1 year ago

Hello @strehle , We would like CF UAA to get aligned with https://datatracker.ietf.org/doc/html/rfc7644, so that it can be used with modern IDPS which has capability to sync user in uaa using scim endpoints .

strehle commented 1 year ago

@emalm @Tallicia @torsten-sap FYI.

Agree that SCIM 2.0 is standard, therefore added PM to discuss the prio.

UAA uses currently https://github.com/pingidentity/scim With https://github.com/pingidentity/scim2 an adoption to /v2/Users, /v2/Groups etc. could happen without that much effort, but I have not verified it.

@Rohit04061992 If you would be able to provide a PR it would increase the speed here.

Rohit04061992 commented 1 year ago

Hi @strehle ,

Yes i have also landed up till https://github.com/pingidentity/scim2, was trying to integrate this as well, but if this comes rom the community it will be best .

Rohit04061992 commented 1 year ago

@strehle I have initiated a PR at this location https://github.com/cloudfoundry/uaa/pull/2583 But changes to scim sdk is breaking most of the scim based implementation, which makes sense , but this also means major changes in uaa .

Rohit04061992 commented 1 year ago

Hi @emalm , Can you take this , i feel that this enhancement would be of great value for uaa as a product as well.

strehle commented 2 months ago

duplicate to https://github.com/cloudfoundry/uaa/issues/2976