Share via

Microsoft Entra ID SCIM Validator test failing PATCH User - Disable User

Jason Gillett 35 Reputation points
2025-03-25T20:44:36.29+00:00

I'm using the validator at https://scimvalidator.microsoft.com/. I'm passing 17 and failing 4.
One of the failing tests is: PATCH /Users/Id - Patch User - Disable User
Error Details: Response from a GET and filter request on a disabled User should have attribute active

Initial Resource Creation Request:

{
  "active": true,
  "displayName": "XKWLCONOGMVT",
  "emails": [
    {
      "type": "work",
      "value": "******@prohaska.biz"
    }
  ],
  "externalId": "9950b140-90a0-4201-9d65-b5f209fb4cd0",
  "name": {
    "formatted": "Aric",
    "familyName": "Nia",
    "givenName": "Sandy"
  },
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User"
  ],
  "userName": "******@romaguera.uk"
}

HTTP Request:

GET https://site.com/scim/v2/20/Users?filter=userName+eq+"dale.mohr%40romaguera.uk"

Response Body:

{
  "Resources": [
    {
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
      ],
      "userName": "******@romaguera.uk",
      "id": "2746",
      "externalId": "9950b140-90a0-4201-9d65-b5f209fb4cd0",
      "name": {
        "formatted": "Aric",
        "familyName": "Nia",
        "givenName": "Sandy",
        "middleName": null,
        "honorificPrefix": "",
        "honorificSuffix": null
      },
      "displayName": "XKWLCONOGMVT",
      "emails": [
        {
          "value": "******@prohaska.biz",
          "type": "work",
          "primary": true
        }
      ],
      "phoneNumbers": [],
      "addresses": null,
      "active": false,
      "meta": {
        "ResourceType": "User",
        "Created": "2025-03-25T16:17:00",
        "LastModified": "2025-03-25T20:19:00",
        "Version": null,
        "Location": null
      }
    }
  ],
  "itemsPerPage": 1,
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:ListResponse"
  ],
  "startIndex": 1,
  "totalResults": 1
}
Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
  1. Lancelot Herrbach 0 Reputation points
    2026-01-27T22:54:45.4666667+00:00

    I had the same problem, it was that :

    • Reponse from GET /Users with filters was ok : returned the user with attribute active = false
    • Reponse from GET /Users/{user_id} was not ok : returned 404

    Microsoft Entra ID SCIM Validator only show the reponse of GET /Users with filters but not the reponse of GET /Users/{user_id} so the test seems to be passing while it fail.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.