Share via

SCIM validator Patch Group - Replace Attributes

Klaudia 21 Reputation points
2024-11-18T12:13:58.45+00:00

Hey,

SCIM validator (Patch Group - Replace Attributes) is sending PATCH request like this

{
  "Operations": [],
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:PatchOp"
  ]
}

and our response is

{
  "detail": "Required 'WRITE_ONLY' attribute 'urn:ietf:params:scim:api:messages:2.0:PatchOp:Operations' is missing",
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:Error"
  ],
  "status": 400
}

which I think is correct. What should be the expected behaviour? There is nothing to change based on the request.

I also see the same test being mentioned here, but the body looks different. Is this a bug in validator?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

1 answer

Sort by: Most helpful
  1. Anonymous
    2024-11-18T20:14:12.1566667+00:00

    Hi @Klaudia , the server's response is correct. PATCH requires at least one operation, and you have 0. If the validator sends an empty "Operations" array, it is incorrect per SCIM standards.

    Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,

    James

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.