Update Manager through SCIM does not work.

Hi.

I'm running Identity Manger 9.1.

When creating a new user, Manager gets inserted. But when updating a Manager, nothing happens. I've enabled Trace to find out more and the log says that the op is Remove and seen below.

2023-03-20 13:32:21.7721 TRACE (SystemConnector SCIM-BCBF30 Job dc147a1f-19f1-4c4a-a54b-c7809c05cd35) : 		Target:"SCIM" Method:"OnCommitObject" Number:"2550101" Message:"Method OnCommitObject called." 
2023-03-20 13:32:21.8190 DEBUG (SystemConnector SCIM-BCBF30 Job dc147a1f-19f1-4c4a-a54b-c7809c05cd35) : 		Target:"SCIM" Method:"Send" Number:"2550121" Message:"Sending PATCH request using URI https://services.acme.com/api/scim/v2/Users/f0ca13ff-070c-4b21-a2f4-be51e5aa1413" 
2023-03-20 13:32:21.8347 DEBUG (SystemConnector SCIM-BCBF30 Job dc147a1f-19f1-4c4a-a54b-c7809c05cd35) : 		Target:"SCIM" Method:"Send" Number:"2550122" Message:"Sending data {
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:PatchOp"
  ],
  "Operations": [
    {
      "op": "replace",
      "value": {
        "locale": "sv_SE"
      }
    },
    {
      "op": "replace",
      "value": {
        "preferredLanguage": "sv-SE"
      }
    },
    {
      "op": "remove",
      "path": "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User~manager"
    }
  ]
}"

This is what the Sync log looks like:

Sequence number Schema type   Object                                                                                  Processing method     Schema property   Value new (long)
6               User          CN=f0ca13ff-070c-4b21-a2f4-be51e5aa1413,O=User,DC=https://services.acme.com/api/scim/v2 Update                locale            sv_SE
6               User          CN=f0ca13ff-070c-4b21-a2f4-be51e5aa1413,O=User,DC=https://services.acme.com/api/scim/v2 Update                preferredLanguage sv-SE
6               User          CN=f0ca13ff-070c-4b21-a2f4-be51e5aa1413,O=User,DC=https://services.acme.com/api/scim/v2 Update                urn:ietf:params:scim:schemas:extension:enterprise:2.0:User~manager~value  963aa740-d8c8-41d3-ac7a-160a8712e27f

Any help is appreciated!

/Henrik

  • Hello Tino,

    thanks for the reply. No we do not have access to configure the endpoint, but yes we did try to switch from PATCH to PUT (for this it is enough to omit /ServiceProviderConfig during sync project configuration).

    Unfortunately it did lead to other issues (bugs in OIM?). If you have access to SR#02104663 (comment from "May 31, 2023 03:56 AM"). In this case OIM sends complete object as what you would expect (including attrbiutes from schema extensions), but it does not send "schema names" (they must be listed in "schemas" attribute on the object sent) for the schema extensions and the target system says "invalid user attributes".

    Best Regards,

    Alexey

  • Hi Alexey,

    so it should be handled with the SR. Maybe it has been fixed already, in my 9.0 version I see the schemas array in PUT request.

    regards,

       Tino