schema extension

[Emmanuel Dreux]

Hello,

 

I had not worked yet on schema extensions and today I need to publish a public key (not the full x509Certificate, just the public key) of a certificate using the SCIM protocol.

 

I quickly reviewed the spec but didn't clearly find how to query the schema with his version.

The endpoint is /Schemas but what will be the URI of the requested class?

Ex: schemas/Enterprise or /schemas/Enterprise/V1.0? or both are working?

 

Also, is there a way to request that the created Users must have the extended attributes, said differently, must "derive" from the extended class?

MinOccur and MaxOccur can be used within the xsd of the extended schema.But here the goal is to teach the remote implementation that the User objects must have the publicKey attribute.

I believe that there is no way to discover by querying the schema that the user objects synchronized must derive from the extended class (= User core class + extended class)?

 

Thanks,

Emmanuel.

[Kelly Grizzle]

> The endpoint is /Schemas but what will be the URI of the requested class?

 

I believe that you have to use the URI of the schema definition - http://www.simplecloud.info/specs/draft-scim-core-schema-00.html#resource-schema.

 

To retrieve the core user schema you would hit /Schemas/urn:scim:schemas:core:1.0:User.

 

 

> Also, is there a way to request that the created Users must have the extended attributes, said differently, must "derive" from the extended class?

 

I don’t know of any way to introspect the schema to ask this.  A POST /Users should fail and return error information if all required attributes aren’t present.  Being able to determine this a priori by just using /Schemas might be difficult.

 

--Kelly