Scim validator failing due to missing values from the fetched response

Question

We've got a very simple schema that only includes the following user attributes (All required) with no group support:

• userName

• active

• emails[type eq "work"].value

• name.givenName

• name.familyName

When we run the scim validator we get two errors back for "Create a new User" namely:

• The value of active is Missing from the fetched Resource
• The value of emails[type eq "work"].value is Missing from the fetched Resource

However they are both clearly in the response so the errors don't make sense.

How do we get past this, and how do we go about getting app approval once it's sorted?

The full response is:

{
  "active": true,
  "displayName": null,
  "emails": [
    {
      "type": "work",
      "primary": true,
      "value": "cesar@simonis.uk",
      "display": null,
      "$ref": null
    }
  ],
  "entitlements": [],
  "externalId": null,
  "groups": [],
  "id": "2638",
  "locale": null,
  "meta": {
    "resourceType": null,
    "created": "2023-11-08T07:31:19Z",
    "lastModified": null,
    "location": null,
    "version": null
  },
  "name": {
    "formatted": null,
    "familyName": "Christelle",
    "givenName": "Kris",
    "middleName": null,
    "honorificPrefix": null,
    "honorificSuffix": null
  },
  "nickName": null,
  "password": null,
  "photos": [],
  "preferredLanguage": null,
  "profileUrl": null,
  "roles": [],
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User"
  ],
  "timezone": null,
  "title": null,
  "userName": "nella_okuneva@hilll.info",
  "userType": null
}

Answer 1

@Andrew Tombs

Thank you for your post!

Errors:

• The value of active is Missing from the fetched Resource
• The value of emails[type eq "work"].value is Missing from the fetched Resource

I understand that you're running into the above errors when using the SCIM Validator with your schema. To hopefully help point you in the right direction, can you ensure that your POST /Users request is correctly formatted with the appropriate User attributes?

• From your screenshot and when referencing the SCIM protocol requests and responses documentation, it looks like your request only contains userName, which could be why you're seeing the emails value error.

{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
	],
    "userName": "Test_User_ab6490ee-1e48-479e-a20b-2d77186b5dd1",

}

POST /Users Request:

{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User",
        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"],
    "externalId": "0a21f0f2-8d2a-4f8e-bf98-7363c4aed4ef",
    "userName": "Test_User_ab6490ee-1e48-479e-a20b-2d77186b5dd1",
    "active": true,
    "emails": [{
        "primary": true,
        "type": "work",
        "value": "Test_User_fd0ea19b-0777-472c-9f96-4f70d2226f2e@testuser.com"
    }],
    "meta": {
        "resourceType": "User"
    },
    "name": {
        "formatted": "givenName familyName",
        "familyName": "familyName",
        "givenName": "givenName"
    },
    "roles": []
}

• I'll also reach out to one of the PMs (@Danny Zollner ) on the AAD Provisioning team, to see if he can look into your issue as well.

Once your application is working as expected you should be able to submit a request to publish your application in the Microsoft Entra application gallery.

---

Additional Links:

• SCIM protocol requests and responses
• User Operations
• PATCH /Groups for AzureAD SCIM synchronization fails - Issue where the customer eventually ran into a similar error.
• Design your user and group schema

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

---

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.