Before to proceed you must be familiar with the following technologies:
The SCIM Framework realized provides limitations on original SCIM features that include filtering, paging, patch operations and bulk.
In particular, SCIM query filter expressions with or
logic operator or parenthesis or brackets are not supported.
At this stage supported operators are the following:
and
logic operatoreq
equals co
contains sw
starts with ew
ends withurn:ietf:params:scim:schemas:core:2.0:User:name.givenName co \"James\"
). startPage
field of SCIM search request indicates the page target and the count
field specifies the number of element in that page.attributes
and excludedAttributes
attributes is not implemented yet.
In addition to SCIM standards, it was added a new Attribute Data Types called RESOURCE . This data type includes some information as the resourceSchema to describe the URN of that resource, and extensionSchema to describe an eventually extension URN.
The following is an example obtained calling Resource Schema API:
{
"name": "rolesToAdd",
"type": "RESOURCE",
"mutability": "READ_WRITE",
"returned": "DEFAULT",
"uniqueness": "NONE",
"multiValued": true,
"description": "List of entitlements to add.",
"required": false,
"caseExact": true,
"resourceSchema": "urn:ietf:params:scim:schemas:core:2.0:Entitlement",
"extensionSchema": "urn:ibm:params:scim:schemas:extension:bean:arm:2.0:Entitlement"
}
This means that rolesToAdd
is a resource described by "urn:ietf:params:scim:schemas:core:2.0:Entitlement" schema with "urn:ibm:params:scim:schemas:extension:bean:arm:2.0:Entitlement" extension.
When calling the SCIM API, you'll need to use an API Token generated calling Login API method.
You must pass the token in "Authorization"
header: e.g.
Authorization : Bearer WwgdmVyc2lvbj0iMS4wIiBlbmNv
Every API is described by the following sections:
REST API for Access Request implments only User Entitlement assignment workflow. In order to operate this workflow, the following step must be executed: