Hi Sailors,
I would like to make a call to SCIM API /Users endpoint and do some filtering on both: identity filtering and returned attributes filtering.
I’m trying to make a call like this:
/identityiq/scim/v2/Users?filter=urn:ietf:params:scim:schemas:core:2.0:User:emails.value eq “email addres”&attributes=urn:ietf:params:scim:schemas:core:2.0:User:emails.value
I have no problem with filtering identities based on: filter=urn:ietf:params:scim:schemas:core:2.0:User:emails.value eq “email addres”
but unfortunately attributes=urn:ietf:params:scim:schemas:core:2.0:User:emails.value is not working properly:
Response from call:
{
“totalResults”:1,
“startIndex”:1,
“schemas”:[
“urn:ietf:params:scim:api:messages:2.0:ListResponse”
],
“Resources”:[
{
“meta”:{
“created”:“2021-11-03T09:19:04.649Z”,
“location”:"/identityiq/scim/v2/Users/hash",
“lastModified”:“2022-04-21T14:28:32.318Z”,
“version”:"W/“1650551312318"”,
“resourceType”:“User”
},
“schemas”:[
“urn:ietf:params:scim:schemas:core:2.0:User”
],
“id”:“hash”
}
]
}
The same problem occurs with all complex attributes like name, urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager, emails, etc.
Without choosing anything inside complex attributes it works fine:
Query:
/identityiq/scim/v2/Users?filter=urn:ietf:params:scim:schemas:core:2.0:User:emails.value eq “email address”&attributes=urn:ietf:params:scim:schemas:core:2.0:User:emails
Response:
{
“totalResults”:1,
“startIndex”:1,
“schemas”:[
“urn:ietf:params:scim:api:messages:2.0:ListResponse”
],
“Resources”:[
{
“emails”:[
{
“type”:“work”,
“value”:“email address”,
“primary”:true
}
],
“meta”:{
“created”:“2022-04-07T10:39:44.881Z”,
“location”:"/identityiq/scim/v2/Users/hash",
“lastModified”:“2022-04-20T13:45:45.628Z”,
“version”:"W/“1650462345628"”,
“resourceType”:“User”
},
“schemas”:[
“urn:ietf:params:scim:schemas:core:2.0:User”
],
“id”:“hash”
}
]
}