IBM Support

PI99317: REQUEST TO SCIM "GROUPS/{ID}" ENDPOINT SPECIFYING "MEMBERS" ATTRIBUTE DOESN'T RETURN THE GROUP MEMBERS

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Request to SCIM "groups/{id}" endpoint specifying "members"
    attribute doesn't return the group members. For example,
    trying
    to retrieve a group and its members using the below filter
    will
    not return the members of the group:
    https://localhost:9443/ibm/api/scim/Groups?filter=cn%20eq%20
    %22g
    Group1%22&attributes=members
    
    Instead it returns:
    {"totalResults":1,"schemas":["urn:scim:schemas:core:1.0"],"R
    esou
    rces":[{"id":"cn=gGroup1,ou=groups,O=DEPTEST"}]}
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty- Virtual Member Manager      *
    *                  (VMM)                                       *
    ****************************************************************
    * PROBLEM DESCRIPTION: SCIM queries to the "Groups/{ID}" and   *
    *                      "Users/{ID}" endpoints do not return    *
    *                      group membership                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    SCIM queries to the "Groups/{ID}" endpoint requesting the
    "members" attribute and queries to the "Users/{ID}" endpoint
    requesting the "groups" attribute should return group
    membership, but do not.
    
    Below are two example queries that fail to return group
    membership, even though it is explicitly requested:
    
    
    https://localhost:9443/ibm/api/scim/Groups?filter=displayName%20
    eq%20"group1"&attributes=members
    
    https://localhost:9443/ibm/api/scim/Users?filter=displayName%20e
    q%20"user1"&attributes=groups
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PI99317

  • Reported component name

    LIBERTY PROFILE

  • Reported component ID

    5724J0814

  • Reported release

    CD0

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-06-19

  • Closed date

    2018-07-16

  • Last modified date

    2018-07-16

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    LIBERTY PROFILE

  • Fixed component ID

    5724J0814

Applicable component levels

  • RCD0 PSY

       UP

[{"Business Unit":{"code":"BU029","label":"Software"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"CD0"}]

Document Information

Modified date:
17 June 2020