
From randomshelley@gmail.com  Fri Feb  1 11:37:10 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42C1221F8B33 for <scim@ietfa.amsl.com>; Fri,  1 Feb 2013 11:37:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7M7Db11F+TcB for <scim@ietfa.amsl.com>; Fri,  1 Feb 2013 11:37:09 -0800 (PST)
Received: from mail-ee0-f52.google.com (mail-ee0-f52.google.com [74.125.83.52]) by ietfa.amsl.com (Postfix) with ESMTP id 83F3621F8BE2 for <scim@ietf.org>; Fri,  1 Feb 2013 11:37:09 -0800 (PST)
Received: by mail-ee0-f52.google.com with SMTP id b15so2269030eek.39 for <scim@ietf.org>; Fri, 01 Feb 2013 11:37:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=FYgZgGf+HFIHsKHYf2ytpWs71Jc+ZOqdNU8LJgYbYsI=; b=lNyvzL5u6nwjPN5ibtZlfAI6sa67jPDOEoIhBY6Wv0OAATkjx9DlPu/BLRNEYkgD0C we9PPwxeViPt9egetegCxtb/BGf5FLr+RZxhZ2asJaa/wQB4M9dsuYT2Jpf5j8zSFKGy 2Sa6rjwKm9ocEMPE9rBiLPrQyzfL5q/4davVfqcG2YblptYORiohwkje+N0cnfE7qANX l7Jn2mITPvQHjh+rFMdHutFUd96Q1s2FWDOZCB4LGg0Ri4Kb7UuWhxmMPq1bC7XCsnvs arKrzVsTLRqRCP1OY7fyC5u/ghrtf1vYCfUJpb0hILskQX4DcLD76lNTd+JavPtovA7C 1/Lg==
MIME-Version: 1.0
X-Received: by 10.14.218.7 with SMTP id j7mr43069037eep.0.1359747428531; Fri, 01 Feb 2013 11:37:08 -0800 (PST)
Received: by 10.14.221.8 with HTTP; Fri, 1 Feb 2013 11:37:08 -0800 (PST)
Date: Fri, 1 Feb 2013 13:37:08 -0600
Message-ID: <CAGUsYPz7_9Tat93aC2t=YAQcHG6dmboYDYij_8sRpKA6CZoWEA@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: scim@ietf.org
Content-Type: multipart/alternative; boundary=047d7b621dd0763fdf04d4aede89
Subject: [scim] Groups Member Type
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Feb 2013 19:37:10 -0000

--047d7b621dd0763fdf04d4aede89
Content-Type: text/plain; charset=ISO-8859-1

As indicated in Section 8, the canonical types for Group members are
READ-ONLY. As such, how can consumers provide the type (i.e. "User" or
"Group")? Is it implied that IDs are unique across both users and groups in
order for service providers to fulfill this requirement?

--047d7b621dd0763fdf04d4aede89
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

As indicated in Section 8, the canonical types for Group members are READ-O=
NLY. As such, how can consumers provide the type (i.e. &quot;User&quot; or =
&quot;Group&quot;)? Is it implied that IDs are unique across both users and=
 groups in order for service providers to fulfill this requirement?<br>

--047d7b621dd0763fdf04d4aede89--

From kelly.grizzle@sailpoint.com  Mon Feb  4 06:08:26 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC30521F8440 for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 06:08:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.448
X-Spam-Level: 
X-Spam-Status: No, score=-3.448 tagged_above=-999 required=5 tests=[AWL=0.150,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lmDey2tP9ACR for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 06:08:25 -0800 (PST)
Received: from va3outboundpool.messaging.microsoft.com (va3ehsobe001.messaging.microsoft.com [216.32.180.11]) by ietfa.amsl.com (Postfix) with ESMTP id A822921F8430 for <scim@ietf.org>; Mon,  4 Feb 2013 06:08:25 -0800 (PST)
Received: from mail83-va3-R.bigfish.com (10.7.14.247) by VA3EHSOBE011.bigfish.com (10.7.40.61) with Microsoft SMTP Server id 14.1.225.23; Mon, 4 Feb 2013 14:08:24 +0000
Received: from mail83-va3 (localhost [127.0.0.1])	by mail83-va3-R.bigfish.com (Postfix) with ESMTP id AA2403C0170; Mon,  4 Feb 2013 14:08:24 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT001.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -21
X-BigFish: PS-21(zz9371Ic85fhzz1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL17326ah8275bh8275dh18c673hz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h1155h)
Received-SPF: softfail (mail83-va3: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT001.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail83-va3 (localhost.localdomain [127.0.0.1]) by mail83-va3 (MessageSwitch) id 1359986902680743_11886; Mon,  4 Feb 2013 14:08:22 +0000 (UTC)
Received: from VA3EHSMHS003.bigfish.com (unknown [10.7.14.251])	by mail83-va3.bigfish.com (Postfix) with ESMTP id A232460052; Mon,  4 Feb 2013 14:08:22 +0000 (UTC)
Received: from BLUPRD0412HT001.namprd04.prod.outlook.com (132.245.1.133) by VA3EHSMHS003.bigfish.com (10.7.99.13) with Microsoft SMTP Server (TLS) id 14.1.225.23; Mon, 4 Feb 2013 14:08:21 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.243]) by BLUPRD0412HT001.namprd04.prod.outlook.com ([10.255.214.162]) with mapi id 14.16.0263.000; Mon, 4 Feb 2013 14:08:21 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Shelley <randomshelley@gmail.com>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] Groups Member Type
Thread-Index: AQHOALOOeHp6hjJutkGc7C2Tyxq6nZhpv6cA
Date: Mon, 4 Feb 2013 14:08:21 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AB2F38@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPz7_9Tat93aC2t=YAQcHG6dmboYDYij_8sRpKA6CZoWEA@mail.gmail.com>
In-Reply-To: <CAGUsYPz7_9Tat93aC2t=YAQcHG6dmboYDYij_8sRpKA6CZoWEA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 135B59C8003C0E135B5B15
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AB2F38BLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Subject: Re: [scim] Groups Member Type
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Feb 2013 14:08:26 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB2F38BLUPRD0412MB643_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Good point.  It seems like this should say "immutable" rather than "read-on=
ly", since it can be set initially but not updated.  Thoughts from anyone e=
lse?  If this seems reasonable I'll open an issue to get this fixed.

--Kelly

From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of She=
lley
Sent: Friday, February 01, 2013 1:37 PM
To: scim@ietf.org
Subject: [scim] Groups Member Type

As indicated in Section 8, the canonical types for Group members are READ-O=
NLY. As such, how can consumers provide the type (i.e. "User" or "Group")? =
Is it implied that IDs are unique across both users and groups in order for=
 service providers to fulfill this requirement?

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB2F38BLUPRD0412MB643_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Good point.&nbsp; It seem=
s like this should say &#8220;immutable&#8221; rather than &#8220;read-only=
&#8221;, since it can be set initially but not updated.&nbsp; Thoughts from=
 anyone else?&nbsp;
 If this seems reasonable I&#8217;ll open an issue to get this fixed.<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> scim-bou=
nces@ietf.org [mailto:scim-bounces@ietf.org]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Friday, February 01, 2013 1:37 PM<br>
<b>To:</b> scim@ietf.org<br>
<b>Subject:</b> [scim] Groups Member Type<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">As indicated in Section 8, the canonical types for G=
roup members are READ-ONLY. As such, how can consumers provide the type (i.=
e. &quot;User&quot; or &quot;Group&quot;)? Is it implied that IDs are uniqu=
e across both users and groups in order for service providers
 to fulfill this requirement?<o:p></o:p></p>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB2F38BLUPRD0412MB643_--

From randomshelley@gmail.com  Mon Feb  4 09:16:33 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E4A321F8A7E for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 09:16:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AqsdTEiPZBE2 for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 09:16:33 -0800 (PST)
Received: from mail-ie0-x22d.google.com (ie-in-x022d.1e100.net [IPv6:2607:f8b0:4001:c03::22d]) by ietfa.amsl.com (Postfix) with ESMTP id 2132B21F8A77 for <scim@ietf.org>; Mon,  4 Feb 2013 09:16:33 -0800 (PST)
Received: by mail-ie0-f173.google.com with SMTP id 9so6021828iec.4 for <scim@ietf.org>; Mon, 04 Feb 2013 09:16:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=0UY0fQQFlY7NfLXe9PRYI9oNKXO/9V2oPhqxBgtNgOA=; b=L587Lo4a/1LZVIa4fgJ966sj7LL/+bbOP/YUMRq7rbTFdlnnsJbaGvH4MJEa3E3o9w vC3aUc6cWiwkimLVJ172Og/Gm37Z0k8KCokNrj9OaWqKmirEAzyC+fOkQa7MDcKrvG1Y PuH2c2WN27e0FD9QnQPJz055xEPEQ1goAGy3PN3uM5WQpnJc8yYmIjfCEMcpQwvN5zAE Za4t2ouMi5kKpr0SXtTpzuZXsNUMu5DAPts2N1QF0ggD8K1+IuB3ZvZyGb8TZNO8AxFv CvIzoeItuDFKgfc3B/nWkJUZNmHdrkn/5uSCnVOXo5yfJJi0jKU0ZaexX7t0Pzq9Qy+5 /jYg==
MIME-Version: 1.0
X-Received: by 10.50.190.138 with SMTP id gq10mr7924530igc.38.1359998192525; Mon, 04 Feb 2013 09:16:32 -0800 (PST)
Received: by 10.64.69.10 with HTTP; Mon, 4 Feb 2013 09:16:32 -0800 (PST)
Date: Mon, 4 Feb 2013 11:16:32 -0600
Message-ID: <CAGUsYPzcFSer1YWCtBuBw6Dhky+_Mv+F3tQzuE8PAUPOUScx2A@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: scim@ietf.org
Content-Type: multipart/alternative; boundary=f46d0447f12c291fdc04d4e941b7
Subject: [scim] Normative Schema Representation Example
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Feb 2013 17:16:33 -0000

--f46d0447f12c291fdc04d4e941b7
Content-Type: text/plain; charset=ISO-8859-1

The JSON schema representation in "11.6. Resource Schema Representation"
doesn't appear to be "normative" as indicated, since it merely provides an
example Schema resource for a User. Should this be updated to a
"non-normative example" instead?

--f46d0447f12c291fdc04d4e941b7
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

The JSON schema representation in &quot;11.6. Resource Schema Representatio=
n&quot; doesn&#39;t appear to be &quot;normative&quot; as indicated, since =
it merely provides an example Schema resource for a User. Should this be up=
dated to a &quot;non-normative example&quot; instead?<br>

--f46d0447f12c291fdc04d4e941b7--

From kelly.grizzle@sailpoint.com  Mon Feb  4 12:08:14 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B373B21F8AB6 for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 12:08:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.523
X-Spam-Level: 
X-Spam-Status: No, score=-3.523 tagged_above=-999 required=5 tests=[AWL=0.075,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZQy0i6p68ny1 for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 12:08:14 -0800 (PST)
Received: from am1outboundpool.messaging.microsoft.com (am1ehsobe003.messaging.microsoft.com [213.199.154.206]) by ietfa.amsl.com (Postfix) with ESMTP id 8185521F8A99 for <scim@ietf.org>; Mon,  4 Feb 2013 12:08:13 -0800 (PST)
Received: from mail74-am1-R.bigfish.com (10.3.201.242) by AM1EHSOBE016.bigfish.com (10.3.207.138) with Microsoft SMTP Server id 14.1.225.23; Mon, 4 Feb 2013 20:08:11 +0000
Received: from mail74-am1 (localhost [127.0.0.1])	by mail74-am1-R.bigfish.com (Postfix) with ESMTP id E2DCB3E0197; Mon,  4 Feb 2013 20:08:11 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT002.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -21
X-BigFish: PS-21(zz9371Ic85fhzz1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL17326ah8275bh8275dh18c673hz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h1155h)
Received-SPF: softfail (mail74-am1: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT002.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail74-am1 (localhost.localdomain [127.0.0.1]) by mail74-am1 (MessageSwitch) id 1360008484322062_19274; Mon,  4 Feb 2013 20:08:04 +0000 (UTC)
Received: from AM1EHSMHS010.bigfish.com (unknown [10.3.201.225])	by mail74-am1.bigfish.com (Postfix) with ESMTP id 4B9F72E0066; Mon,  4 Feb 2013 20:08:04 +0000 (UTC)
Received: from BLUPRD0412HT002.namprd04.prod.outlook.com (132.245.1.133) by AM1EHSMHS010.bigfish.com (10.3.207.110) with Microsoft SMTP Server (TLS) id 14.1.225.23; Mon, 4 Feb 2013 20:08:04 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.243]) by BLUPRD0412HT002.namprd04.prod.outlook.com ([10.255.214.163]) with mapi id 14.16.0263.000; Mon, 4 Feb 2013 20:08:02 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Shelley <randomshelley@gmail.com>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] Normative Schema Representation Example
Thread-Index: AQHOAvtmVdAFMqS7qEqdkDRbbvslqphqIIMw
Date: Mon, 4 Feb 2013 20:08:02 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AB35FD@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPzcFSer1YWCtBuBw6Dhky+_Mv+F3tQzuE8PAUPOUScx2A@mail.gmail.com>
In-Reply-To: <CAGUsYPzcFSer1YWCtBuBw6Dhky+_Mv+F3tQzuE8PAUPOUScx2A@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 14A4A4C3003C1414A4A610
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AB35FDBLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Subject: Re: [scim] Normative Schema Representation Example
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Feb 2013 20:08:14 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB35FDBLUPRD0412MB643_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

You're right, Shelley.  I opened issue 34 to get this fixed.

http://trac.tools.ietf.org/wg/scim/trac/ticket/34

--Kelly

From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of She=
lley
Sent: Monday, February 04, 2013 11:17 AM
To: scim@ietf.org
Subject: [scim] Normative Schema Representation Example

The JSON schema representation in "11.6. Resource Schema Representation" do=
esn't appear to be "normative" as indicated, since it merely provides an ex=
ample Schema resource for a User. Should this be updated to a "non-normativ=
e example" instead?

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB35FDBLUPRD0412MB643_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">You&#8217;re right, Shell=
ey.&nbsp; I opened issue 34 to get this fixed.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><a href=3D"http://trac.to=
ols.ietf.org/wg/scim/trac/ticket/34">http://trac.tools.ietf.org/wg/scim/tra=
c/ticket/34</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> scim-bou=
nces@ietf.org [mailto:scim-bounces@ietf.org]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Monday, February 04, 2013 11:17 AM<br>
<b>To:</b> scim@ietf.org<br>
<b>Subject:</b> [scim] Normative Schema Representation Example<o:p></o:p></=
span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The JSON schema representation in &quot;11.6. Resour=
ce Schema Representation&quot; doesn't appear to be &quot;normative&quot; a=
s indicated, since it merely provides an example Schema resource for a User=
. Should this be updated to a &quot;non-normative example&quot;
 instead?<o:p></o:p></p>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB35FDBLUPRD0412MB643_--

From kelly.grizzle@sailpoint.com  Mon Feb  4 13:42:43 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 759C221F85B4 for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 13:42:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.398
X-Spam-Level: 
X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[AWL=-0.100, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pwr2QDESQ-LR for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 13:42:39 -0800 (PST)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe002.messaging.microsoft.com [216.32.181.182]) by ietfa.amsl.com (Postfix) with ESMTP id AD29421F85B0 for <scim@ietf.org>; Mon,  4 Feb 2013 13:42:39 -0800 (PST)
Received: from mail77-ch1-R.bigfish.com (10.43.68.230) by CH1EHSOBE020.bigfish.com (10.43.70.77) with Microsoft SMTP Server id 14.1.225.23; Mon, 4 Feb 2013 21:42:38 +0000
Received: from mail77-ch1 (localhost [127.0.0.1])	by mail77-ch1-R.bigfish.com (Postfix) with ESMTP id D8815420132; Mon,  4 Feb 2013 21:42:38 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT004.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -25
X-BigFish: PS-25(zz98dI9371Ic89bh936eIc85dhd799h4015I1447Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL17326ah8275bh8275dh18c673h1954cbh18602ehz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h1155h)
Received-SPF: softfail (mail77-ch1: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT004.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail77-ch1 (localhost.localdomain [127.0.0.1]) by mail77-ch1 (MessageSwitch) id 1360014156399570_30998; Mon,  4 Feb 2013 21:42:36 +0000 (UTC)
Received: from CH1EHSMHS002.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.245])	by mail77-ch1.bigfish.com (Postfix) with ESMTP id 5E71C44009A;	Mon,  4 Feb 2013 21:42:36 +0000 (UTC)
Received: from BLUPRD0412HT004.namprd04.prod.outlook.com (132.245.1.133) by CH1EHSMHS002.bigfish.com (10.43.70.2) with Microsoft SMTP Server (TLS) id 14.1.225.23; Mon, 4 Feb 2013 21:42:32 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.243]) by BLUPRD0412HT004.namprd04.prod.outlook.com ([10.255.214.165]) with mapi id 14.16.0263.000; Mon, 4 Feb 2013 21:42:30 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Phil Hunt <phil.hunt@oracle.com>, =?iso-8859-1?Q?Erik_Wahlstr=F6m?= <erik.wahlstrom@nexussafe.com>
Thread-Topic: [scim] BulkId - how transient is it?
Thread-Index: AQHN/9+zvrcUxJt0U0Ok4hzGID3fXJhjy83wgAAFzQCAABYbgIAALXEAgAYoiTA=
Date: Mon, 4 Feb 2013 21:42:30 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AB3749@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <9497C84B-61CB-4B7C-AB21-79CB6390597A@oracle.com> <56C3C758F9D6534CA3778EAA1E0C343753AA4AA5@BLUPRD0412MB643.namprd04.prod.outlook.com> <AB6DE935-2CA6-4B7F-B62F-47A0F4BF5A93@oracle.com> <9D0D3B21-41FA-4418-92D2-9A297B30F369@nexussafe.com> <286EABE0-52AB-4957-9ABD-38C9CCB594A4@oracle.com>
In-Reply-To: <286EABE0-52AB-4957-9ABD-38C9CCB594A4@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 14FB2172003C1414FB22BF
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AB3749BLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Cc: "scim@ietf.org WG" <scim@ietf.org>
Subject: Re: [scim] BulkId - how transient is it?
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Feb 2013 21:42:43 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB3749BLUPRD0412MB643_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

This could get very tricky because you are dependent on ordering.  Consider=
 the following:


1)      Client POSTs a new user (User A) which gets asynchronously processe=
d.  A transient identifier is returned.

2)      Client performs a PUT or PATCH to update a different user (User B) =
and set User B's manager as User A.  This uses the transient identifier ret=
urned from request #1.

The problem is that request #2 may now need to be queued depending on wheth=
er request #1 has been completed.  It also raises your original question ab=
out how transient is the identifier.  If the identifier returned from reque=
st #1 is released after the async processing is complete, then request #2 c=
ould potentially be invalid.

With bulk, we added some constraints that make these non-issues.  It seems =
like it would be really hard to get this right for async identifiers.

--Kelly

From: Phil Hunt [mailto:phil.hunt@oracle.com]
Sent: Thursday, January 31, 2013 5:27 PM
To: Erik Wahlstr=F6m
Cc: scim@ietf.org WG; Kelly Grizzle
Subject: Re: [scim] BulkId - how transient is it?

Erik,

Thanks for the links. The links you provided seem to cover a very different=
 case than mine. In all the previous proposals, async processing seems to b=
e about bulk requests with large numbers of operations that therefore might=
 take a very long time to process.

In my case, a single transaction can spontaneously (e.g. by policy) turn in=
to an async transaction.  For example, for a particular client, it may be p=
olicy that all new add requests go through an online approval workflow befo=
re being completed.

Or, a UI component modifies a user's email. But before that attribute can b=
e set, policy requires the new value be confirmed. It's conceivable we coul=
d force the client to be "authoritative" and check the value itself. But it=
 is really an example of the service provider's workflow taking final prece=
dence (over the client's for example).

Phil

@independentid
www.independentid.com<http://www.independentid.com>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>




On 2013-01-31, at 12:44 PM, Erik Wahlstr=F6m wrote:


Yeah. It's, in it's current form, only valid in one request.
This where my 5 cents when we tried to get async into bulk. We opted out fr=
om it and settled for the limitations instead.

They include some pros and cons. Nothing fancy though.

The three alternatives we looked at:
https://code.google.com/p/scim/issues/attachmentText?id=3D11&aid=3D11000500=
0&name=3Dbatch_0.1.txt&token=3DP_jxo114_stZ91x1fRZ39IQ93F8%3A1359663928990#=
287<https://code.google.com/p/scim/issues/attachmentText?id=3D11&aid=3D1100=
05000&name=3Dbatch_0.1.txt&token=3DP_jxo114_stZ91x1fRZ39IQ93F8:135966392899=
0#287>

The final version before we removed it:
https://code.google.com/p/scim/issues/attachmentText?id=3D11&aid=3D11001000=
0&name=3Dbulk_0.6.txt&token=3DDZPyExCX4vkWBBmg_4pDigSS3TA%3A1359663928991#5=
47<https://code.google.com/p/scim/issues/attachmentText?id=3D11&aid=3D11001=
0000&name=3Dbulk_0.6.txt&token=3DDZPyExCX4vkWBBmg_4pDigSS3TA:1359663928991#=
547>

/ Erik


On Jan 31, 2013, at 8:25 PM, Phil Hunt wrote:


To give some more background to the reason I'm asking. I'm considering what=
 are the issues with ASYNC processing (where an operation does not complete=
 immediately, eg. because of a workflow requirement). If we had asynchronou=
s support, then it would create requirements (and conflicts) similar to bul=
k requests in that you have a series of transactions that may have to refer=
ence each other. For example, if someone POSTs a new User object and then w=
ants to subsequently modify or reference that object prior to completion, t=
han the same transient id issue comes up.

I'm looking for a way we could have a generalized simple solution. If the s=
erver returned status 202 (accepted) on the original POST, the URL returned=
 could have qualities similar to bulkId.  This allows follow-on transaction=
s/references to occur. Naturally, if the original POST fails, than as in Bu=
lk, the dependent operations also fail.

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>



On 2013-01-31, at 11:05 AM, Kelly Grizzle wrote:


I believe that bulkId was intended to be scoped to a single request.  Erik,=
 do you have any thoughts?

--Kelly

From: scim-bounces@ietf.org<mailto:scim-bounces@ietf.org> [mailto:scim-boun=
ces@ietf.org] On Behalf Of Phil Hunt
Sent: Thursday, January 31, 2013 12:21 PM
To: scim@ietf.org<mailto:scim@ietf.org> WG
Subject: [scim] BulkId - how transient is it?

Is bulkId intended to span multiple request/responses or is it intended onl=
y to be valid within a single bulk request?  In other words, if a bulk sequ=
ence of operations were split across 2 or more requests, could bulkId be va=
lid?

>From the spec...


bulkId  The transient identifier of a newly created Resource,

         unique within a bulk request and created by the Consumer.  The

         bulkId serves as a surrogate Resource id enabling Consumers to

         uniquely identify newly created Resources in the Response and

         cross reference new Resources in and across operations within a

         bulk request.  REQUIRED when method is POST.

Thanks,

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>



_______________________________________________
scim mailing list
scim@ietf.org<mailto:scim@ietf.org>
https://www.ietf.org/mailman/listinfo/scim


_______________________________________________
scim mailing list
scim@ietf.org<mailto:scim@ietf.org>
https://www.ietf.org/mailman/listinfo/scim


--_000_56C3C758F9D6534CA3778EAA1E0C343753AB3749BLUPRD0412MB643_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
span.apple-style-span
	{mso-style-name:apple-style-span;}
span.apple-converted-space
	{mso-style-name:apple-converted-space;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;}
span.EmailStyle21
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:784233059;
	mso-list-type:hybrid;
	mso-list-template-ids:2067849260 67698705 67698713 67698715 67698703 67698=
713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-text:"%1\)";
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">This could get very trick=
y because you are dependent on ordering.&nbsp; Consider the following:<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&q=
uot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso-=
list:Ignore">1)<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Client POSTs a ne=
w user (User A) which gets asynchronously processed.&nbsp; A transient iden=
tifier is returned.<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&q=
uot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso-=
list:Ignore">2)<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Client performs a=
 PUT or PATCH to update a different user (User B) and set User B&#8217;s ma=
nager as User A.&nbsp; This uses the transient identifier returned
 from request #1.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">The problem is that reque=
st #2 may now need to be queued depending on whether request #1 has been co=
mpleted.&nbsp; It also raises your original question about how
 transient is the identifier.&nbsp; If the identifier returned from request=
 #1 is released after the async processing is complete, then request #2 cou=
ld potentially be invalid.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">With bulk, we added some =
constraints that make these non-issues.&nbsp; It seems like it would be rea=
lly hard to get this right for async identifiers.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Phil Hun=
t [mailto:phil.hunt@oracle.com]
<br>
<b>Sent:</b> Thursday, January 31, 2013 5:27 PM<br>
<b>To:</b> Erik Wahlstr=F6m<br>
<b>Cc:</b> scim@ietf.org WG; Kelly Grizzle<br>
<b>Subject:</b> Re: [scim] BulkId - how transient is it?<o:p></o:p></span><=
/p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Erik,<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Thanks for the links. The links you provided seem to=
 cover a very different case than mine. In all the previous proposals, asyn=
c processing seems to be about bulk requests with large numbers of operatio=
ns that therefore might take a very
 long time to process.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">In my case, a single transaction can spontaneously (=
e.g. by policy) turn into an async transaction. &nbsp;For example, for a pa=
rticular client, it may be policy that all new add requests go through an o=
nline approval workflow before being completed.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Or, a UI component modifies a user's email. But befo=
re that attribute can be set, policy requires the new value be confirmed. I=
t's conceivable we could force the client to be &quot;authoritative&quot; a=
nd check the value itself. But it is really
 an example of the service provider's workflow taking final precedence (ove=
r the client's for example).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black">Phil<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></=
p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black">@independentid<o:p></o:p><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black"><a href=3D"http://www.inde=
pendentid.com">www.independentid.com</a><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:13.5pt"><span style=3D"font-s=
ize:13.5pt;font-family:&quot;Helvetica&quot;,&quot;sans-serif&quot;;color:b=
lack"><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><o:p>=
</o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:13.5pt;font-family:&quot;He=
lvetica&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span><=
/p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:13.5pt;font-family:&quot;He=
lvetica&quot;,&quot;sans-serif&quot;;color:black"><br>
<br>
</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On 2013-01-31, at 12:44 PM, Erik Wahlstr=F6m wrote:<=
o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal">Yeah. It's, in it's current form, only valid in one =
request.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">This where my 5 cents when we tried to get async int=
o bulk. We opted out from it and settled for the limitations instead.<o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">They include some pros and cons. Nothing fancy thoug=
h.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The three alternatives we looked at:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><a href=3D"https://code.google.com/p/scim/issues/att=
achmentText?id=3D11&amp;aid=3D110005000&amp;name=3Dbatch_0.1.txt&amp;token=
=3DP_jxo114_stZ91x1fRZ39IQ93F8:1359663928990#287">https://code.google.com/p=
/scim/issues/attachmentText?id=3D11&amp;aid=3D110005000&amp;name=3Dbatch_0.=
1.txt&amp;token=3DP_jxo114_stZ91x1fRZ39IQ93F8%3A1359663928990#287</a><o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The final version before we removed it:<o:p></o:p></=
p>
</div>
<div>
<p class=3D"MsoNormal"><a href=3D"https://code.google.com/p/scim/issues/att=
achmentText?id=3D11&amp;aid=3D110010000&amp;name=3Dbulk_0.6.txt&amp;token=
=3DDZPyExCX4vkWBBmg_4pDigSS3TA:1359663928991#547">https://code.google.com/p=
/scim/issues/attachmentText?id=3D11&amp;aid=3D110010000&amp;name=3Dbulk_0.6=
.txt&amp;token=3DDZPyExCX4vkWBBmg_4pDigSS3TA%3A1359663928991#547</a><o:p></=
o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">/ Erik<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On Jan 31, 2013, at 8:25 PM, Phil Hunt wrote:<o:p></=
o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">To give some more background to the reason I'm askin=
g. I'm considering what are the issues with ASYNC processing (where an oper=
ation does not complete immediately, eg. because of a workflow requirement)=
. If we had asynchronous support,
 then it would create requirements (and conflicts) similar to bulk requests=
 in that you have a series of transactions that may have to reference each =
other. For example, if someone POSTs a new User object and then wants to su=
bsequently modify or reference that
 object prior to completion, than the same transient id issue comes up. <o:=
p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I'm looking for a way we could have a generalized si=
mple solution. If the server returned status 202 (accepted) on the original=
 POST, the URL returned could have qualities similar to bulkId. &nbsp;This =
allows follow-on transactions/references
 to occur. Naturally, if the original POST fails, than as in Bulk, the depe=
ndent operations also fail.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">Phil<o:p></o:p></spa=
n></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt"><o:p>&nbsp;</o:p></s=
pan></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">@independentid<o:p><=
/o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt"><a href=3D"http://ww=
w.independentid.com/">www.independentid.com</a><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><a href=3D"mailto:phi=
l.hunt@oracle.com">phil.hunt@oracle.com</a><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On 2013-01-31, at 11:05 AM, Kelly Grizzle wrote:<o:p=
></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">I believe that bulkId was=
 intended to be scoped to a single request.&nbsp; Erik, do you have any tho=
ughts?</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p><=
/p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly</span><o:p></o:p>=
</p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p><=
/p>
</div>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in;border-width:initial;border-color:initial">
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span class=3D"apple-=
converted-space"><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&q=
uot;,&quot;sans-serif&quot;">&nbsp;</span></span><span style=3D"font-size:1=
0.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"><a href=3D"mai=
lto:scim-bounces@ietf.org">scim-bounces@ietf.org</a>
 [<a href=3D"mailto:scim-bounces@ietf.org">mailto:scim-bounces@ietf.org</a>=
]<span class=3D"apple-converted-space">&nbsp;</span><b>On Behalf Of<span cl=
ass=3D"apple-converted-space">&nbsp;</span></b>Phil Hunt<br>
<b>Sent:</b><span class=3D"apple-converted-space">&nbsp;</span>Thursday, Ja=
nuary 31, 2013 12:21 PM<br>
<b>To:</b><span class=3D"apple-converted-space">&nbsp;</span><a href=3D"mai=
lto:scim@ietf.org">scim@ietf.org</a> WG<br>
<b>Subject:</b><span class=3D"apple-converted-space">&nbsp;</span>[scim] Bu=
lkId - how transient is it?</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Is bulkId intended to span multiple request/response=
s or is it intended only to be valid within a single bulk request? &nbsp;In=
 other words, if a bulk sequence of operations were split across 2 or more =
requests, could bulkId be valid?<o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal">From the spec...<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
<div>
<pre style=3D"page-break-before:always;orphans: 2;text-align:-webkit-auto;w=
idows: 2;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word=
-spacing:0px"><span style=3D"font-size:12.0pt;color:black">bulkId&nbsp; The=
 transient identifier of a newly created Resource,</span><o:p></o:p></pre>
<pre style=3D"page-break-before:always"><span style=3D"font-size:12.0pt;col=
or:black">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; unique within a =
bulk request and created by the Consumer.&nbsp; The</span><o:p></o:p></pre>
<pre style=3D"page-break-before:always"><span style=3D"font-size:12.0pt;col=
or:black">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bulkId serves as=
 a surrogate Resource id enabling Consumers to</span><o:p></o:p></pre>
<pre style=3D"page-break-before:always"><span style=3D"font-size:12.0pt;col=
or:black">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; uniquely identif=
y newly created Resources in the Response and</span><o:p></o:p></pre>
<pre style=3D"page-break-before:always"><span style=3D"font-size:12.0pt;col=
or:black">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cross reference =
new Resources in and across operations within a</span><o:p></o:p></pre>
<pre style=3D"page-break-before:always"><span style=3D"font-size:12.0pt;col=
or:black">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bulk request.&nb=
sp; REQUIRED when method is POST.</span><o:p></o:p></pre>
<div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span class=3D"apple-style-span"><span style=3D"font=
-size:9.0pt">Thanks,</span></span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span class=3D"apple-style-span"><span style=3D"font=
-size:9.0pt">Phil</span></span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black">&nbsp;</span><o:p></o:p></=
p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black">@independentid</span><o:p>=
</o:p></p>
</div>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black"><a href=3D"http://www.inde=
pendentid.com/">www.independentid.com</a></span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:13.5pt"><span style=3D"font-s=
ize:13.5pt;font-family:&quot;Helvetica&quot;,&quot;sans-serif&quot;;color:b=
lack"><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a></spa=
n><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
<p class=3D"MsoNormal">_______________________________________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim">https://www.ietf.org=
/mailman/listinfo/scim</a><o:p></o:p></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</div>
<p class=3D"MsoNormal">_______________________________________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim">https://www.ietf.org=
/mailman/listinfo/scim</a><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB3749BLUPRD0412MB643_--

From randomshelley@gmail.com  Mon Feb  4 16:17:22 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD98B21F8569 for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 16:17:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Z3DtBCmlIdW for <scim@ietfa.amsl.com>; Mon,  4 Feb 2013 16:17:22 -0800 (PST)
Received: from mail-ia0-x232.google.com (mail-ia0-x232.google.com [IPv6:2607:f8b0:4001:c02::232]) by ietfa.amsl.com (Postfix) with ESMTP id 3B51C21F84FB for <scim@ietf.org>; Mon,  4 Feb 2013 16:17:22 -0800 (PST)
Received: by mail-ia0-f178.google.com with SMTP id y26so8657625iab.23 for <scim@ietf.org>; Mon, 04 Feb 2013 16:17:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=j73Q6HcjRzAiflUBqdM6lM0cFffu41QmsVca2Eq3sYQ=; b=zH4sm0Cza8pdM5uyropSUnz632iHyGuCi2O5zsk7RiSi3ivvT9Zuyq1/kr9AYp42Z4 tkd6j9pdAjgXCD7LW/oAYOhL8Wy767ggC3JSy4hWCuqXVi/LO6zoi0N+yRTRtR8eT3Rn 0JrR/HIdeXO0k5GvQRmEfAbaO7v8v9ljafTgqPdpH5Doa9VTdXrMvoICHZ9trKhvtQbU ao5qZXqpzPwS5f2E+zAY6kOMdrwTD0cOPtSSXuDSKzIN/yZDTgOl7uR+9B4IrjO96CKb z4Vi8d+X/I80siTbsmTkGldbpB2pb3TQvrP+uO0YXvzP++Cbj+vNF5rDKaaIlR3dvMVe Y6ew==
MIME-Version: 1.0
X-Received: by 10.50.190.138 with SMTP id gq10mr10060363igc.38.1360023441794;  Mon, 04 Feb 2013 16:17:21 -0800 (PST)
Received: by 10.64.69.10 with HTTP; Mon, 4 Feb 2013 16:17:21 -0800 (PST)
In-Reply-To: <56C3C758F9D6534CA3778EAA1E0C343753AB35FD@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPzcFSer1YWCtBuBw6Dhky+_Mv+F3tQzuE8PAUPOUScx2A@mail.gmail.com> <56C3C758F9D6534CA3778EAA1E0C343753AB35FD@BLUPRD0412MB643.namprd04.prod.outlook.com>
Date: Mon, 4 Feb 2013 18:17:21 -0600
Message-ID: <CAGUsYPxjm=HwV=YVG_KvPN7yk5O40Vmy2cP+Ys0sSsAKb4vFaw@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: Kelly Grizzle <kelly.grizzle@sailpoint.com>
Content-Type: multipart/alternative; boundary=f46d0447f12c22651504d4ef22bd
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Normative Schema Representation Example
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 00:17:23 -0000

--f46d0447f12c22651504d4ef22bd
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Thanks, Kelly.

Reviewing this example also prompted a few additional questions that
weren't clear to me in the spec -

* [Core Schema Attributes] Must service providers expose *all *attributes
for User/Group as defined in the core schema? Or, is it acceptable for
service providers to only declare/accept a subset of these attributes?

* [Extension Schema Attributes] Similar to the previous question, must
service providers expose all attributes from schema extensions?
Specifically, in the example in 11.6, it looks like only one of the
enterprise extension attributes is specified.

* [Additional Attributes] Does SCIM prescribe or recommend an approach for
handling unknown attributes provided by consumers (i.e. those that are not
listed in the Resource Schema)? Given the schema-based nature of resources
and the fact that providers may ignore POSTed content (per the SCIM
Protocol 3.1), it seems that unknown attributes should likely be ignored
(such that they are not persisted/returned nor is an error returned).


On Mon, Feb 4, 2013 at 2:08 PM, Kelly Grizzle
<kelly.grizzle@sailpoint.com>wrote:

>  You=92re right, Shelley.  I opened issue 34 to get this fixed.****
>
> ** **
>
> http://trac.tools.ietf.org/wg/scim/trac/ticket/34****
>
> ** **
>
> --Kelly****
>
> ** **
>
> *From:* scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] *On Behalf
> Of *Shelley
> *Sent:* Monday, February 04, 2013 11:17 AM
> *To:* scim@ietf.org
> *Subject:* [scim] Normative Schema Representation Example****
>
> ** **
>
> The JSON schema representation in "11.6. Resource Schema Representation"
> doesn't appear to be "normative" as indicated, since it merely provides a=
n
> example Schema resource for a User. Should this be updated to a
> "non-normative example" instead?****
>

--f46d0447f12c22651504d4ef22bd
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Thanks, Kelly.<br><br>Reviewing this example also prompted a few additional=
 questions that weren&#39;t clear to me in the spec -<br><br>* [Core Schema=
 Attributes] Must service providers expose <i>all </i>attributes for User/G=
roup as defined in the core schema? Or, is it acceptable for service provid=
ers to only declare/accept a subset of these attributes?<br>
<br>* [Extension Schema Attributes] Similar to the previous question, must =
service providers expose all attributes from schema extensions? Specificall=
y, in the example in 11.6, it looks like only one of the enterprise extensi=
on attributes is specified.<br>
<br>* [Additional Attributes] Does SCIM prescribe or recommend an approach =
for handling unknown attributes provided by consumers (i.e. those that are =
not listed in the Resource Schema)? Given the schema-based nature of resour=
ces and the fact that providers may ignore POSTed content (per the SCIM Pro=
tocol 3.1), it seems that unknown attributes should likely be ignored (such=
 that they are not persisted/returned nor is an error returned).<br>
<br><br><div class=3D"gmail_quote">On Mon, Feb 4, 2013 at 2:08 PM, Kelly Gr=
izzle <span dir=3D"ltr">&lt;<a href=3D"mailto:kelly.grizzle@sailpoint.com" =
target=3D"_blank">kelly.grizzle@sailpoint.com</a>&gt;</span> wrote:<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #c=
cc solid;padding-left:1ex">






<div link=3D"blue" vlink=3D"purple" lang=3D"EN-US">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">You=92re right, Shelley.=
=A0 I opened issue 34 to get this fixed.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><a href=3D"http://trac.to=
ols.ietf.org/wg/scim/trac/ticket/34" target=3D"_blank">http://trac.tools.ie=
tf.org/wg/scim/trac/ticket/34</a><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">--Kelly<u></u><u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> <a href=
=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@ietf.org</=
a> [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-=
bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Monday, February 04, 2013 11:17 AM<br>
<b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> [scim] Normative Schema Representation Example<u></u><u></u=
></span></p><div class=3D"im">
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal">The JSON schema representation in &quot;11.6. Resour=
ce Schema Representation&quot; doesn&#39;t appear to be &quot;normative&quo=
t; as indicated, since it merely provides an example Schema resource for a =
User. Should this be updated to a &quot;non-normative example&quot;
 instead?<u></u><u></u></p>
</div></div>
</div>

</blockquote></div><br>

--f46d0447f12c22651504d4ef22bd--

From kelly.grizzle@sailpoint.com  Tue Feb  5 06:39:51 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8E6321F894E for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 06:39:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.023
X-Spam-Level: 
X-Spam-Status: No, score=-5.023 tagged_above=-999 required=5 tests=[AWL=1.575,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yiOGysAcNWqQ for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 06:39:50 -0800 (PST)
Received: from co9outboundpool.messaging.microsoft.com (co9ehsobe002.messaging.microsoft.com [207.46.163.25]) by ietfa.amsl.com (Postfix) with ESMTP id B320521F8938 for <scim@ietf.org>; Tue,  5 Feb 2013 06:39:49 -0800 (PST)
Received: from mail90-co9-R.bigfish.com (10.236.132.252) by CO9EHSOBE006.bigfish.com (10.236.130.69) with Microsoft SMTP Server id 14.1.225.23; Tue, 5 Feb 2013 14:39:48 +0000
Received: from mail90-co9 (localhost [127.0.0.1])	by mail90-co9-R.bigfish.com (Postfix) with ESMTP id 741A39E0889; Tue,  5 Feb 2013 14:39:48 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT003.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -24
X-BigFish: PS-24(zz98dI9371Ic85fh1432I4015Izz1ee6h1de0h1202h1e76h1d1ah1d2ahz8dhz1033IL17326ah8275bh8275dh18c673hz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h1155h)
Received-SPF: softfail (mail90-co9: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT003.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail90-co9 (localhost.localdomain [127.0.0.1]) by mail90-co9 (MessageSwitch) id 1360075174542381_30154; Tue,  5 Feb 2013 14:39:34 +0000 (UTC)
Received: from CO9EHSMHS025.bigfish.com (unknown [10.236.132.238])	by mail90-co9.bigfish.com (Postfix) with ESMTP id 7BEA36C0064; Tue,  5 Feb 2013 14:39:34 +0000 (UTC)
Received: from BLUPRD0412HT003.namprd04.prod.outlook.com (132.245.1.133) by CO9EHSMHS025.bigfish.com (10.236.130.35) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 5 Feb 2013 14:39:28 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.243]) by BLUPRD0412HT003.namprd04.prod.outlook.com ([10.255.214.164]) with mapi id 14.16.0263.000; Tue, 5 Feb 2013 14:39:24 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Shelley <randomshelley@gmail.com>
Thread-Topic: [scim] Normative Schema Representation Example
Thread-Index: AQHOAvtmVdAFMqS7qEqdkDRbbvslqphqIIMwgABF2oCAAO/PgA==
Date: Tue, 5 Feb 2013 14:39:24 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AB3E8E@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPzcFSer1YWCtBuBw6Dhky+_Mv+F3tQzuE8PAUPOUScx2A@mail.gmail.com> <56C3C758F9D6534CA3778EAA1E0C343753AB35FD@BLUPRD0412MB643.namprd04.prod.outlook.com> <CAGUsYPxjm=HwV=YVG_KvPN7yk5O40Vmy2cP+Ys0sSsAKb4vFaw@mail.gmail.com>
In-Reply-To: <CAGUsYPxjm=HwV=YVG_KvPN7yk5O40Vmy2cP+Ys0sSsAKb4vFaw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 189E22CD003C20189E241A
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AB3E8EBLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Normative Schema Representation Example
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 14:39:52 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB3E8EBLUPRD0412MB643_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

> [Core Schema Attributes] Must service providers expose all attributes for=
 User/Group as defined in the core schema?

No.  Service providers may just declare/accept a subset.


> [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema
> extensions? Specifically, in the example in 11.6, it looks like only one =
of the enterprise extension attributes is specified.

No.  Service providers can just expose a subset.  I believe that since 11.6=
 is non-normative (as you pointed out), this is just
showing an example of what the schema resource might look like.


>  it seems that unknown attributes should likely be ignored (such that the=
y are not persisted/returned nor is an error returned).

I believe this is correct.

--Kelly

From: Shelley [mailto:randomshelley@gmail.com]
Sent: Monday, February 04, 2013 6:17 PM
To: Kelly Grizzle
Cc: scim@ietf.org
Subject: Re: [scim] Normative Schema Representation Example

Thanks, Kelly.

Reviewing this example also prompted a few additional questions that weren'=
t clear to me in the spec -

* [Core Schema Attributes] Must service providers expose all attributes for=
 User/Group as defined in the core schema? Or, is it acceptable for service=
 providers to only declare/accept a subset of these attributes?

* [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema extensions? Specifically, i=
n the example in 11.6, it looks like only one of the enterprise extension a=
ttributes is specified.

* [Additional Attributes] Does SCIM prescribe or recommend an approach for =
handling unknown attributes provided by consumers (i.e. those that are not =
listed in the Resource Schema)? Given the schema-based nature of resources =
and the fact that providers may ignore POSTed content (per the SCIM Protoco=
l 3.1), it seems that unknown attributes should likely be ignored (such tha=
t they are not persisted/returned nor is an error returned).

On Mon, Feb 4, 2013 at 2:08 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com<=
mailto:kelly.grizzle@sailpoint.com>> wrote:
You're right, Shelley.  I opened issue 34 to get this fixed.

http://trac.tools.ietf.org/wg/scim/trac/ticket/34

--Kelly

From: scim-bounces@ietf.org<mailto:scim-bounces@ietf.org> [mailto:scim-boun=
ces@ietf.org<mailto:scim-bounces@ietf.org>] On Behalf Of Shelley
Sent: Monday, February 04, 2013 11:17 AM
To: scim@ietf.org<mailto:scim@ietf.org>
Subject: [scim] Normative Schema Representation Example

The JSON schema representation in "11.6. Resource Schema Representation" do=
esn't appear to be "normative" as indicated, since it merely provides an ex=
ample Schema resource for a User. Should this be updated to a "non-normativ=
e example" instead?


--_000_56C3C758F9D6534CA3778EAA1E0C343753AB3E8EBLUPRD0412MB643_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">&gt;
</span>[Core Schema Attributes] Must service providers expose <i>all </i>at=
tributes for User/Group as defined in the core schema?<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">No.&nbsp; Service providers may just declare/accept =
a subset.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; [Extension Schema Attributes] Similar to the pr=
evious question, must service providers expose all attributes from schema<o=
:p></o:p></p>
<p class=3D"MsoNormal">&gt; extensions? Specifically, in the example in 11.=
6, it looks like only one of the enterprise extension attributes is specifi=
ed.<br>
<br>
<o:p></o:p></p>
<p class=3D"MsoNormal">No.&nbsp; Service providers can just expose a subset=
.&nbsp; I believe that since 11.6 is non-normative (as you pointed out), th=
is is just<o:p></o:p></p>
<p class=3D"MsoNormal">showing an example of what the schema resource might=
 look like.<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">&gt;
</span>&nbsp;it seems that unknown attributes should likely be ignored (suc=
h that they are not persisted/returned nor is an error returned).<span styl=
e=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot=
;;color:#1F497D"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal">I believe this is correct.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">--Kelly <o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Shelley =
[mailto:randomshelley@gmail.com]
<br>
<b>Sent:</b> Monday, February 04, 2013 6:17 PM<br>
<b>To:</b> Kelly Grizzle<br>
<b>Cc:</b> scim@ietf.org<br>
<b>Subject:</b> Re: [scim] Normative Schema Representation Example<o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Thanks, Kelly.<br>
<br>
Reviewing this example also prompted a few additional questions that weren'=
t clear to me in the spec -<br>
<br>
* [Core Schema Attributes] Must service providers expose <i>all </i>attribu=
tes for User/Group as defined in the core schema? Or, is it acceptable for =
service providers to only declare/accept a subset of these attributes?<br>
<br>
* [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema extensions? Specifically, i=
n the example in 11.6, it looks like only one of the enterprise extension a=
ttributes is specified.<br>
<br>
* [Additional Attributes] Does SCIM prescribe or recommend an approach for =
handling unknown attributes provided by consumers (i.e. those that are not =
listed in the Resource Schema)? Given the schema-based nature of resources =
and the fact that providers may
 ignore POSTed content (per the SCIM Protocol 3.1), it seems that unknown a=
ttributes should likely be ignored (such that they are not persisted/return=
ed nor is an error returned).<br>
<br>
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">On Mon, Feb 4, 2013 at 2:08 PM, Kelly Grizzle &lt;<a=
 href=3D"mailto:kelly.grizzle@sailpoint.com" target=3D"_blank">kelly.grizzl=
e@sailpoint.com</a>&gt; wrote:<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">You&#8217;re right, Shelley.&nbsp; I op=
ened issue 34 to get this fixed.</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D"><a href=3D"http://trac.tools.ietf.org/w=
g/scim/trac/ticket/34" target=3D"_blank">http://trac.tools.ietf.org/wg/scim=
/trac/ticket/34</a></span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">--Kelly</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><b><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,=
&quot;sans-serif&quot;">From:</span></b><span style=3D"font-size:10.0pt;fon=
t-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;">
<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@iet=
f.org</a> [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank=
">scim-bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Monday, February 04, 2013 11:17 AM<br>
<b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> [scim] Normative Schema Representation Example</span><o:p><=
/o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">The JSON schema representation in &quot;11.6. Resource Schema Repr=
esentation&quot; doesn't appear to be &quot;normative&quot; as indicated, s=
ince it merely provides an example Schema resource for a
 User. Should this be updated to a &quot;non-normative example&quot; instea=
d?<o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB3E8EBLUPRD0412MB643_--

From Chris.Phillips@canarie.ca  Tue Feb  5 06:42:32 2013
Return-Path: <Chris.Phillips@canarie.ca>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C44121F8549 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 06:42:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PF0FBnaSkZCG for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 06:42:31 -0800 (PST)
Received: from mail.canarie.ca (mail.canarie.ca [205.189.33.5]) by ietfa.amsl.com (Postfix) with ESMTP id 2208321F8545 for <scim@ietf.org>; Tue,  5 Feb 2013 06:42:31 -0800 (PST)
Received: from RANCOR.canarie.local ([fe80::5c7e:71ff:1ed0:916d]) by RANCOR.canarie.local ([fe80::5c7e:71ff:1ed0:916d%10]) with mapi; Tue, 5 Feb 2013 09:42:30 -0500
From: Chris Phillips <Chris.Phillips@canarie.ca>
To: "scim@ietf.org" <scim@ietf.org>
Date: Tue, 5 Feb 2013 09:42:28 -0500
Thread-Topic: really a security context question --> Re: [scim] Normative Schema Representation Example
Thread-Index: Ac4DrwXyz1pF4cq+TKGak/yP7Gvtiw==
Message-ID: <CD367422.EC0F2%chris.phillips@canarie.ca>
In-Reply-To: <CAGUsYPxjm=HwV=YVG_KvPN7yk5O40Vmy2cP+Ys0sSsAKb4vFaw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.3.0.121105
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_CD367422EC0F2chrisphillipscanarieca_"
MIME-Version: 1.0
Subject: [scim] really a security context question --> Re: Normative Schema Representation Example
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 14:42:32 -0000

--_000_CD367422EC0F2chrisphillipscanarieca_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Shelly,

Good questions around attribute visibility.
 From my perspective, in order to answer the questions you pose we would ha=
ve to talk about the security model overlaid on SCIM. This topic has been d=
eferred somewhat by relegating security policy to be handled by the securit=
y context of the endpoint.  If you can connect, then you can transact.  You=
 can see the TBD's in the draft docs as indicators that these are areas tha=
t have not been fully explored.

As a dialog starter:

The spirit of simplicity drives the security policy to the context of the e=
ndpoint and not internalized in the SCIM protocol, or as minimally as possi=
ble. The artifact of this is that by virtue of connecting I am able to see =
'everything' and therefore the answers to the questions below would :

Must service providers expose all attributes?  YES
For extensions as well? YES

The follow on question on the tip of the tongue is: Should this concerning?=
  Maybe, maybe not.

To help understand the concerns I think that a discussion around what is ne=
eded, if anything,  beyond endpoint security contexts would be useful to de=
scribe the position SCIM as a protocol has regarding security.

I'm sure some folks are prepared to freak out about this, but I haven't hea=
rd people complain greatly about the 1.0 implementations about security or =
any changes for 2.0.  It may be that the endpoint security context is 'just=
 enough' and saying that once in the front door you are free to roam around=
 in the protocol is more valuable than a more complex protocol that is encu=
mbered with a heavy model (read: anything more than the endpoint context).
As a follow on point to this, the implicit context of SCIM is that it is in=
tentionally a conduit for identity information and has Personally Identifia=
ble Information (PII) throughout.  This is why transactions should be over =
SSL and  the confidence of the veracity of  whom is connecting should be im=
portant to you.  These are not new concerns limited to SCIM and are endpoin=
t driven from my perspective.

If you want more contexts today, there's nothing preventing a site to stand=
 up multiple SCIM endpoints each with a  different security policy context =
either.   It would be up to the implementer to tailor the endpoint to the k=
ind of context they want to present.

This isn't to say security is 'solved' though, I think discussion around ho=
w to use SCIM within different contexts and what implications it has on the=
 protocol are good to explore.  Some of the key questions that come to mind=
 are:

 *   where in the SCIM model could the responsibility be BESIDES or in conj=
unction with the endpoint?
 *   what KIND of model would it be?
 *   How could it be applied and in conjunction with endpoint security?
 *   How does it apply to extensions without encumbering the ability to ext=
end unnecessarily?
 *   How would it scale to arbitrarily large number of endpoints?
 *   How would SCIM transactions be  encapsulated within other protocols th=
at take care of security like SAML?

Chris.


From: Shelley <randomshelley@gmail.com<mailto:randomshelley@gmail.com>>
Date: Monday, 4 February, 2013 7:17 PM
To: Kelly Grizzle <kelly.grizzle@sailpoint.com<mailto:kelly.grizzle@sailpoi=
nt.com>>
Cc: "scim@ietf.org<mailto:scim@ietf.org>" <scim@ietf.org<mailto:scim@ietf.o=
rg>>
Subject: Re: [scim] Normative Schema Representation Example

Thanks, Kelly.

Reviewing this example also prompted a few additional questions that weren'=
t clear to me in the spec -

* [Core Schema Attributes] Must service providers expose all attributes for=
 User/Group as defined in the core schema? Or, is it acceptable for service=
 providers to only declare/accept a subset of these attributes?

* [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema extensions? Specifically, i=
n the example in 11.6, it looks like only one of the enterprise extension a=
ttributes is specified.

* [Additional Attributes] Does SCIM prescribe or recommend an approach for =
handling unknown attributes provided by consumers (i.e. those that are not =
listed in the Resource Schema)? Given the schema-based nature of resources =
and the fact that providers may ignore POSTed content (per the SCIM Protoco=
l 3.1), it seems that unknown attributes should likely be ignored (such tha=
t they are not persisted/returned nor is an error returned).


On Mon, Feb 4, 2013 at 2:08 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com<=
mailto:kelly.grizzle@sailpoint.com>> wrote:
You=92re right, Shelley.  I opened issue 34 to get this fixed.

http://trac.tools.ietf.org/wg/scim/trac/ticket/34

--Kelly

From:scim-bounces@ietf.org<mailto:scim-bounces@ietf.org> [mailto:scim-bounc=
es@ietf.org<mailto:scim-bounces@ietf.org>] On Behalf Of Shelley
Sent: Monday, February 04, 2013 11:17 AM
To: scim@ietf.org<mailto:scim@ietf.org>
Subject: [scim] Normative Schema Representation Example

The JSON schema representation in "11.6. Resource Schema Representation" do=
esn't appear to be "normative" as indicated, since it merely provides an ex=
ample Schema resource for a User. Should this be updated to a "non-normativ=
e example" instead?


--_000_CD367422EC0F2chrisphillipscanarieca_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252"></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space;=
 -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14p=
x; font-family: Calibri, sans-serif; "><div>Shelly,</div><div><br></div><di=
v>Good questions around attribute visibility.&nbsp;</div><div>&nbsp;From my=
 perspective, in order to answer the questions you pose we would have to ta=
lk about the security model overlaid on SCIM. This topic has been deferred =
somewhat by relegating security policy to be handled by the security contex=
t of the endpoint. &nbsp;If you can connect, then you can transact. &nbsp;Y=
ou can see the TBD's in the draft docs as indicators that these are areas t=
hat have not been fully explored. &nbsp;&nbsp;</div><div>&nbsp;&nbsp;</div>=
<div>As a dialog starter:&nbsp;</div><div><br></div><div>The spirit of simp=
licity drives the security policy to the context of the endpoint and not in=
ternalized in the SCIM protocol, or as minimally as possible. The artifact =
of this is that by virtue of connecting I am able to see 'everything' and t=
herefore the answers to the questions below would :</div><div><br></div><di=
v>Must service providers expose all attributes? &nbsp;YES</div><div>For ext=
ensions as well? YES</div><div><br></div><div>The follow on question on the=
 tip of the tongue is: Should this concerning? &nbsp;Maybe, maybe not. &nbs=
p;</div><div><br></div><div>To help understand the concerns I think that a =
discussion around what is needed, if anything, &nbsp;beyond endpoint securi=
ty contexts would be useful to describe the position SCIM as a protocol has=
 regarding security.</div><div><br></div><div>I'm sure some folks are prepa=
red to freak out about this, but I haven't heard people complain greatly ab=
out the 1.0 implementations about security or any changes for 2.0. &nbsp;It=
 may be that the endpoint security context is 'just enough' and saying that=
 once in the front door you are free to roam around in the protocol is more=
 valuable than a more complex protocol that is encumbered with a heavy mode=
l (read: anything more than the endpoint context). &nbsp;</div><div>As a fo=
llow on point to this, the implicit context of SCIM is that it is intention=
ally a conduit for identity information and has Personally Identifiable Inf=
ormation (PII) throughout. &nbsp;This is why transactions should be over SS=
L and &nbsp;the confidence of the veracity of &nbsp;whom is connecting shou=
ld be important to you. &nbsp;These are not new concerns limited to SCIM an=
d are endpoint driven from my perspective.</div><div><div><br></div><div>If=
 you want more contexts today, there's nothing preventing a site to stand u=
p multiple SCIM endpoints each with a &nbsp;different security policy conte=
xt either. &nbsp;&nbsp;It would be up to the implementer to tailor the endp=
oint to the kind of context they want to present.</div><div><br></div></div=
><div>This isn't to say security is 'solved' though, I think discussion aro=
und how to use SCIM within different contexts and what implications it has =
on the protocol are good to explore. &nbsp;Some of the key questions that c=
ome to mind are:</div><ul><li><span style=3D"font-style: italic; ">where</s=
pan>&nbsp;in the SCIM model could the responsibility be BESIDES or in conju=
nction with the endpoint?&nbsp;</li><li>what KIND of model would it be?&nbs=
p;</li><li>How could it be applied and in conjunction with endpoint securit=
y?&nbsp;</li><li>How does it apply to extensions without encumbering the ab=
ility to extend unnecessarily?</li><li>How would it scale to arbitrarily la=
rge number of endpoints?&nbsp;</li><li>How would SCIM transactions be &nbsp=
;encapsulated within other protocols that take care of security like SAML?<=
/li></ul><div><br></div><div>Chris.</div><div><br></div><div><br></div><spa=
n id=3D"OLK_SRC_BODY_SECTION"><div style=3D"font-family:Calibri; font-size:=
11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT=
: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; =
BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"=
><span style=3D"font-weight:bold">From: </span> Shelley &lt;<a href=3D"mail=
to:randomshelley@gmail.com">randomshelley@gmail.com</a>&gt;<br><span style=
=3D"font-weight:bold">Date: </span> Monday, 4 February, 2013 7:17 PM<br><sp=
an style=3D"font-weight:bold">To: </span> Kelly Grizzle &lt;<a href=3D"mail=
to:kelly.grizzle@sailpoint.com">kelly.grizzle@sailpoint.com</a>&gt;<br><spa=
n style=3D"font-weight:bold">Cc: </span> &quot;<a href=3D"mailto:scim@ietf.=
org">scim@ietf.org</a>&quot; &lt;<a href=3D"mailto:scim@ietf.org">scim@ietf=
.org</a>&gt;<br><span style=3D"font-weight:bold">Subject: </span> Re: [scim=
] Normative Schema Representation Example<br></div><div><br></div><div><div=
>
Thanks, Kelly.<br><br>
Reviewing this example also prompted a few additional questions that weren'=
t clear to me in the spec -<br><br>
* [Core Schema Attributes] Must service providers expose <i>all </i>attribu=
tes for User/Group as defined in the core schema? Or, is it acceptable for =
service providers to only declare/accept a subset of these attributes?<br><=
br>
* [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema extensions? Specifically, i=
n the example in 11.6, it looks like only one of the enterprise extension a=
ttributes is specified.<br><br>
* [Additional Attributes] Does SCIM prescribe or recommend an approach for =
handling unknown attributes provided by consumers (i.e. those that are not =
listed in the Resource Schema)? Given the schema-based nature of resources =
and the fact that providers may
 ignore POSTed content (per the SCIM Protocol 3.1), it seems that unknown a=
ttributes should likely be ignored (such that they are not persisted/return=
ed nor is an error returned).<br><br><br><div class=3D"gmail_quote">On Mon,=
 Feb 4, 2013 at 2:08 PM, Kelly Grizzle <span dir=3D"ltr">
&lt;<a href=3D"mailto:kelly.grizzle@sailpoint.com" target=3D"_blank">kelly.=
grizzle@sailpoint.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_q=
uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e=
x"><div link=3D"blue" vlink=3D"purple" lang=3D"EN-US"><div><p class=3D"MsoN=
ormal"><span style=3D"font-size: 11pt; color: rgb(31, 73, 125); font-family=
: Calibri, sans-serif; ">You=92re right, Shelley.&nbsp; I opened issue 34 t=
o get this fixed.<u></u><u></u></span></p><p class=3D"MsoNormal"><span styl=
e=3D"font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-s=
erif; "><u></u>&nbsp;<u></u></span></p><p class=3D"MsoNormal"><span style=
=3D"font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-se=
rif; "><a href=3D"http://trac.tools.ietf.org/wg/scim/trac/ticket/34" target=
=3D"_blank">http://trac.tools.ietf.org/wg/scim/trac/ticket/34</a><u></u><u>=
</u></span></p><p class=3D"MsoNormal"><span style=3D"font-size: 11pt; color=
: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><u></u>&nbsp;<u></u=
></span></p><p class=3D"MsoNormal"><span style=3D"font-size: 11pt; color: r=
gb(31, 73, 125); font-family: Calibri, sans-serif; ">--Kelly<u></u><u></u><=
/span></p><p class=3D"MsoNormal"><span style=3D"font-size: 11pt; color: rgb=
(31, 73, 125); font-family: Calibri, sans-serif; "><u></u>&nbsp;<u></u></sp=
an></p><p class=3D"MsoNormal"><b><span style=3D"font-size: 10pt; font-famil=
y: Tahoma, sans-serif; ">From:</span></b><span style=3D"font-size: 10pt; fo=
nt-family: Tahoma, sans-serif; "><a href=3D"mailto:scim-bounces@ietf.org" t=
arget=3D"_blank">scim-bounces@ietf.org</a> [mailto:<a href=3D"mailto:scim-b=
ounces@ietf.org" target=3D"_blank">scim-bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br><b>Sent:</b> Monday, February 04, 2013 11:17=
 AM<br><b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@i=
etf.org</a><br><b>Subject:</b> [scim] Normative Schema Representation Examp=
le<u></u><u></u></span></p><div class=3D"im"><p class=3D"MsoNormal"><u></u>=
&nbsp;<u></u></p><p class=3D"MsoNormal">The JSON schema representation in &=
quot;11.6. Resource Schema Representation&quot; doesn't appear to be &quot;=
normative&quot; as indicated, since it merely provides an example Schema re=
source for a User. Should this be updated to a &quot;non-normative example&=
quot;
 instead?<u></u><u></u></p></div></div></div></blockquote></div><br></div><=
/div></span></body></html>

--_000_CD367422EC0F2chrisphillipscanarieca_--

From prabath@wso2.com  Tue Feb  5 11:10:35 2013
Return-Path: <prabath@wso2.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB59D21F8605 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 11:10:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.751
X-Spam-Level: 
X-Spam-Status: No, score=-1.751 tagged_above=-999 required=5 tests=[AWL=1.225,  BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I5yVVCfLIGrq for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 11:10:34 -0800 (PST)
Received: from mail-ee0-f45.google.com (mail-ee0-f45.google.com [74.125.83.45]) by ietfa.amsl.com (Postfix) with ESMTP id 354AB21F861A for <scim@ietf.org>; Tue,  5 Feb 2013 11:10:33 -0800 (PST)
Received: by mail-ee0-f45.google.com with SMTP id b57so310906eek.4 for <scim@ietf.org>; Tue, 05 Feb 2013 11:10:31 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type:x-gm-message-state; bh=tvJ1c8jovKJBJ6fmLb1axo7eFvfTYNdmsreQT2TLEzw=; b=EN7bJOm3jypIZ9u/rs3OextDc1wNnPyNGzzwWHzslWa95fdqRdszUwr4XkqGIv8lFR iVLHMrOK5iZ9QA7qgl57PbRvqIfz47ORhGtTXaE9Dyr9rHxKi1HWgtZBw5tyeZbspKV6 5epFtl8sQ0i3upbbC7L9MV0DNhP+5FZfS70oLEZpDsZVsHomrK4pQG+imcIg5s2dD6Ka LuFXeUdpNsemoBk9L8TFWQ5eFYpfkd/pl0CTsNIzom/ikHpWL29ktXOgkV1Dv8SQFBcF BXXN069XY0MI3V5G6hJ1tLVQueg34quQBaLcIhHU6oEMHABIYnDNOloGyGZSD7BCL2O6 MYew==
MIME-Version: 1.0
X-Received: by 10.14.209.131 with SMTP id s3mr87485072eeo.26.1360091431010; Tue, 05 Feb 2013 11:10:31 -0800 (PST)
Received: by 10.223.175.134 with HTTP; Tue, 5 Feb 2013 11:10:30 -0800 (PST)
Date: Wed, 6 Feb 2013 00:40:30 +0530
Message-ID: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com>
From: Prabath Siriwardena <prabath@wso2.com>
To: scim@ietf.org
Content-Type: multipart/alternative; boundary=047d7b603bce9b80bb04d4fef673
X-Gm-Message-State: ALoCoQkc2xx1WYfhZd/LHgzhBp77wQWPSUarEhWiH855gjM6HN4J/v2tqjopLv7mbrDwSsMmIaG8
Subject: [scim] Adding a predefined userId - "me"
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 19:10:35 -0000

--047d7b603bce9b80bb04d4fef673
Content-Type: text/plain; charset=ISO-8859-1

With the current spec - to get the details of a specific user we use the
following...

 GET /Users/2819c223-7f76-453a-919d-413861904646
 Host: example.com
 Accept: application/json
 Authorization: Bearer h480djs93hd8

How about having a pre-defined userid - which will provide back the logged
in users info.

 GET /Users/me
 Host: example.com
 Accept: application/json
 Authorization: Bearer h480djs93hd8

In the above case - the information about the user corresponding to the
provided Bearer token will be returned back. This would be similar to
Facebook's Graph API.

Appreciate your thoughts/suggestions...

Thanks & Regards,
Prabath

Mobile : +94 71 809 6732

http://blog.facilelogin.com
http://RampartFAQ.com

--047d7b603bce9b80bb04d4fef673
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

With the current spec - to get the details of a specific user we use the fo=
llowing...<br><br>=A0GET /Users/2819c223-7f76-453a-919d-413861904646<br>=A0=
Host: <a href=3D"http://example.com">example.com</a><br>=A0Accept: applicat=
ion/json<br>
=A0Authorization: Bearer h480djs93hd8<br><br>How about having a pre-defined=
 userid - which will provide back the logged in users info.<br><br>=A0GET /=
Users/me<br>=A0Host: <a href=3D"http://example.com">example.com</a><br>=A0A=
ccept: application/json<br>
=A0Authorization: Bearer h480djs93hd8<br><br>In the above case - the inform=
ation about the user corresponding to the provided Bearer token will be ret=
urned back. This would be similar to Facebook&#39;s Graph API.<br><br>Appre=
ciate your thoughts/suggestions...<br>
<br>Thanks &amp; Regards,<br>Prabath<br><br>Mobile : +94 71 809 6732 <br><b=
r><a href=3D"http://blog.facilelogin.com">http://blog.facilelogin.com</a><b=
r><a href=3D"http://RampartFAQ.com">http://RampartFAQ.com</a>

--047d7b603bce9b80bb04d4fef673--

From kelly.grizzle@sailpoint.com  Tue Feb  5 11:24:50 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10B5C21F8697 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 11:24:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.838
X-Spam-Level: 
X-Spam-Status: No, score=-3.838 tagged_above=-999 required=5 tests=[AWL=-0.240, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qUfB9RqJoSYs for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 11:24:46 -0800 (PST)
Received: from va3outboundpool.messaging.microsoft.com (va3ehsobe001.messaging.microsoft.com [216.32.180.11]) by ietfa.amsl.com (Postfix) with ESMTP id 0A65E21F8694 for <scim@ietf.org>; Tue,  5 Feb 2013 11:24:45 -0800 (PST)
Received: from mail231-va3-R.bigfish.com (10.7.14.247) by VA3EHSOBE006.bigfish.com (10.7.40.26) with Microsoft SMTP Server id 14.1.225.23; Tue, 5 Feb 2013 19:24:45 +0000
Received: from mail231-va3 (localhost [127.0.0.1])	by mail231-va3-R.bigfish.com (Postfix) with ESMTP id E1A25C4035C; Tue,  5 Feb 2013 19:24:44 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT001.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -26
X-BigFish: PS-26(zz98dI9371Ic85fh1102I1418I604Id799h4015Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL17326ah8275bh8275dh18c673hz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h1155h)
Received-SPF: softfail (mail231-va3: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT001.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail231-va3 (localhost.localdomain [127.0.0.1]) by mail231-va3 (MessageSwitch) id 1360092282671216_28385; Tue,  5 Feb 2013 19:24:42 +0000 (UTC)
Received: from VA3EHSMHS017.bigfish.com (unknown [10.7.14.242])	by mail231-va3.bigfish.com (Postfix) with ESMTP id A0747C004D; Tue,  5 Feb 2013 19:24:42 +0000 (UTC)
Received: from BLUPRD0412HT001.namprd04.prod.outlook.com (132.245.1.133) by VA3EHSMHS017.bigfish.com (10.7.99.27) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 5 Feb 2013 19:24:40 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.243]) by BLUPRD0412HT001.namprd04.prod.outlook.com ([10.255.214.162]) with mapi id 14.16.0263.000; Tue, 5 Feb 2013 19:24:39 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Chris Phillips <Chris.Phillips@canarie.ca>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] really a security context question --> Re: Normative Schema Representation Example
Thread-Index: AQHOA68O4lM/CPPKVUajFHHz3XZ36JhrpN7w
Date: Tue, 5 Feb 2013 19:24:39 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AB4446@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPxjm=HwV=YVG_KvPN7yk5O40Vmy2cP+Ys0sSsAKb4vFaw@mail.gmail.com> <CD367422.EC0F2%chris.phillips@canarie.ca>
In-Reply-To: <CD367422.EC0F2%chris.phillips@canarie.ca>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 19A34CBF003C2019A34E0C
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AB4446BLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Subject: Re: [scim] really a security context question --> Re: Normative Schema Representation Example
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 19:24:50 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB4446BLUPRD0412MB643_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I agree with you here, Chris.  I think that hiding data within an endpoint =
raises the level of complexity substantially and that SCIM shouldn't go the=
re unless there are very strong needs.

My statements around the server not being required to return all attributes=
 was more geared toward what the server is capable of storing.  For example=
, if the server does not support the "title" attribute, this would not be p=
ersisted on a POST/PUT/PATCH.

--Kelly

From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Chr=
is Phillips
Sent: Tuesday, February 05, 2013 8:42 AM
To: scim@ietf.org
Subject: [scim] really a security context question --> Re: Normative Schema=
 Representation Example

Shelly,

Good questions around attribute visibility.
 From my perspective, in order to answer the questions you pose we would ha=
ve to talk about the security model overlaid on SCIM. This topic has been d=
eferred somewhat by relegating security policy to be handled by the securit=
y context of the endpoint.  If you can connect, then you can transact.  You=
 can see the TBD's in the draft docs as indicators that these are areas tha=
t have not been fully explored.

As a dialog starter:

The spirit of simplicity drives the security policy to the context of the e=
ndpoint and not internalized in the SCIM protocol, or as minimally as possi=
ble. The artifact of this is that by virtue of connecting I am able to see =
'everything' and therefore the answers to the questions below would :

Must service providers expose all attributes?  YES
For extensions as well? YES

The follow on question on the tip of the tongue is: Should this concerning?=
  Maybe, maybe not.

To help understand the concerns I think that a discussion around what is ne=
eded, if anything,  beyond endpoint security contexts would be useful to de=
scribe the position SCIM as a protocol has regarding security.

I'm sure some folks are prepared to freak out about this, but I haven't hea=
rd people complain greatly about the 1.0 implementations about security or =
any changes for 2.0.  It may be that the endpoint security context is 'just=
 enough' and saying that once in the front door you are free to roam around=
 in the protocol is more valuable than a more complex protocol that is encu=
mbered with a heavy model (read: anything more than the endpoint context).
As a follow on point to this, the implicit context of SCIM is that it is in=
tentionally a conduit for identity information and has Personally Identifia=
ble Information (PII) throughout.  This is why transactions should be over =
SSL and  the confidence of the veracity of  whom is connecting should be im=
portant to you.  These are not new concerns limited to SCIM and are endpoin=
t driven from my perspective.

If you want more contexts today, there's nothing preventing a site to stand=
 up multiple SCIM endpoints each with a  different security policy context =
either.   It would be up to the implementer to tailor the endpoint to the k=
ind of context they want to present.

This isn't to say security is 'solved' though, I think discussion around ho=
w to use SCIM within different contexts and what implications it has on the=
 protocol are good to explore.  Some of the key questions that come to mind=
 are:

  *   where in the SCIM model could the responsibility be BESIDES or in con=
junction with the endpoint?
  *   what KIND of model would it be?
  *   How could it be applied and in conjunction with endpoint security?
  *   How does it apply to extensions without encumbering the ability to ex=
tend unnecessarily?
  *   How would it scale to arbitrarily large number of endpoints?
  *   How would SCIM transactions be  encapsulated within other protocols t=
hat take care of security like SAML?

Chris.


From: Shelley <randomshelley@gmail.com<mailto:randomshelley@gmail.com>>
Date: Monday, 4 February, 2013 7:17 PM
To: Kelly Grizzle <kelly.grizzle@sailpoint.com<mailto:kelly.grizzle@sailpoi=
nt.com>>
Cc: "scim@ietf.org<mailto:scim@ietf.org>" <scim@ietf.org<mailto:scim@ietf.o=
rg>>
Subject: Re: [scim] Normative Schema Representation Example

Thanks, Kelly.

Reviewing this example also prompted a few additional questions that weren'=
t clear to me in the spec -

* [Core Schema Attributes] Must service providers expose all attributes for=
 User/Group as defined in the core schema? Or, is it acceptable for service=
 providers to only declare/accept a subset of these attributes?

* [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema extensions? Specifically, i=
n the example in 11.6, it looks like only one of the enterprise extension a=
ttributes is specified.

* [Additional Attributes] Does SCIM prescribe or recommend an approach for =
handling unknown attributes provided by consumers (i.e. those that are not =
listed in the Resource Schema)? Given the schema-based nature of resources =
and the fact that providers may ignore POSTed content (per the SCIM Protoco=
l 3.1), it seems that unknown attributes should likely be ignored (such tha=
t they are not persisted/returned nor is an error returned).

On Mon, Feb 4, 2013 at 2:08 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com<=
mailto:kelly.grizzle@sailpoint.com>> wrote:
You're right, Shelley.  I opened issue 34 to get this fixed.

http://trac.tools.ietf.org/wg/scim/trac/ticket/34

--Kelly

From:scim-bounces@ietf.org<mailto:scim-bounces@ietf.org> [mailto:scim-bounc=
es@ietf.org<mailto:scim-bounces@ietf.org>] On Behalf Of Shelley
Sent: Monday, February 04, 2013 11:17 AM
To: scim@ietf.org<mailto:scim@ietf.org>
Subject: [scim] Normative Schema Representation Example

The JSON schema representation in "11.6. Resource Schema Representation" do=
esn't appear to be "normative" as indicated, since it merely provides an ex=
ample Schema resource for a User. Should this be updated to a "non-normativ=
e example" instead?


--_000_56C3C758F9D6534CA3778EAA1E0C343753AB4446BLUPRD0412MB643_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:446777146;
	mso-list-template-ids:1658744228;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:"Courier New";
	mso-bidi-font-family:"Times New Roman";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">I agree with you here, Ch=
ris.&nbsp; I think that hiding data within an endpoint raises the level of =
complexity substantially and that SCIM shouldn&#8217;t go there unless
 there are very strong needs.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">My statements around the =
server not being required to return all attributes was more geared toward w=
hat the server is capable of storing.&nbsp; For example, if the
 server does not support the &#8220;title&#8221; attribute, this would not =
be persisted on a POST/PUT/PATCH.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> scim-bou=
nces@ietf.org [mailto:scim-bounces@ietf.org]
<b>On Behalf Of </b>Chris Phillips<br>
<b>Sent:</b> Tuesday, February 05, 2013 8:42 AM<br>
<b>To:</b> scim@ietf.org<br>
<b>Subject:</b> [scim] really a security context question --&gt; Re: Normat=
ive Schema Representation Example<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">Shelly,<o:p></o:p></span></=
p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">Good questions around attri=
bute visibility.&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">&nbsp;From my perspective, =
in order to answer the questions you pose we would have to talk about the s=
ecurity model overlaid on SCIM. This topic has been deferred
 somewhat by relegating security policy to be handled by the security conte=
xt of the endpoint. &nbsp;If you can connect, then you can transact. &nbsp;=
You can see the TBD's in the draft docs as indicators that these are areas =
that have not been fully explored. &nbsp;&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">&nbsp;&nbsp;<o:p></o:p></sp=
an></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">As a dialog starter:&nbsp;<=
o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">The spirit of simplicity dr=
ives the security policy to the context of the endpoint and not internalize=
d in the SCIM protocol, or as minimally as possible. The
 artifact of this is that by virtue of connecting I am able to see 'everyth=
ing' and therefore the answers to the questions below would :<o:p></o:p></s=
pan></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">Must service providers expo=
se all attributes? &nbsp;YES<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">For extensions as well? YES=
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">The follow on question on t=
he tip of the tongue is: Should this concerning? &nbsp;Maybe, maybe not. &n=
bsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">To help understand the conc=
erns I think that a discussion around what is needed, if anything, &nbsp;be=
yond endpoint security contexts would be useful to describe the
 position SCIM as a protocol has regarding security.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">I'm sure some folks are pre=
pared to freak out about this, but I haven't heard people complain greatly =
about the 1.0 implementations about security or any changes
 for 2.0. &nbsp;It may be that the endpoint security context is 'just enoug=
h' and saying that once in the front door you are free to roam around in th=
e protocol is more valuable than a more complex protocol that is encumbered=
 with a heavy model (read: anything more
 than the endpoint context). &nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">As a follow on point to thi=
s, the implicit context of SCIM is that it is intentionally a conduit for i=
dentity information and has Personally Identifiable Information
 (PII) throughout. &nbsp;This is why transactions should be over SSL and &n=
bsp;the confidence of the veracity of &nbsp;whom is connecting should be im=
portant to you. &nbsp;These are not new concerns limited to SCIM and are en=
dpoint driven from my perspective.<o:p></o:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">If you want more contexts t=
oday, there's nothing preventing a site to stand up multiple SCIM endpoints=
 each with a &nbsp;different security policy context either.
 &nbsp;&nbsp;It would be up to the implementer to tailor the endpoint to th=
e kind of context they want to present.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">This isn't to say security =
is 'solved' though, I think discussion around how to use SCIM within differ=
ent contexts and what implications it has on the protocol
 are good to explore. &nbsp;Some of the key questions that come to mind are=
:<o:p></o:p></span></p>
</div>
<ul type=3D"disc">
<li class=3D"MsoNormal" style=3D"color:black;mso-margin-top-alt:auto;mso-ma=
rgin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<i><span style=3D"font-size:10.5pt;font-family:&quot;Calibri&quot;,&quot;sa=
ns-serif&quot;">where</span></i><span style=3D"font-size:10.5pt;font-family=
:&quot;Calibri&quot;,&quot;sans-serif&quot;">&nbsp;in the SCIM model could =
the responsibility be BESIDES or in conjunction with the endpoint?&nbsp;<o:=
p></o:p></span></li><li class=3D"MsoNormal" style=3D"color:black;mso-margin=
-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<span style=3D"font-size:10.5pt;font-family:&quot;Calibri&quot;,&quot;sans-=
serif&quot;">what KIND of model would it be?&nbsp;<o:p></o:p></span></li><l=
i class=3D"MsoNormal" style=3D"color:black;mso-margin-top-alt:auto;mso-marg=
in-bottom-alt:auto;mso-list:l0 level1 lfo1">
<span style=3D"font-size:10.5pt;font-family:&quot;Calibri&quot;,&quot;sans-=
serif&quot;">How could it be applied and in conjunction with endpoint secur=
ity?&nbsp;<o:p></o:p></span></li><li class=3D"MsoNormal" style=3D"color:bla=
ck;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lf=
o1">
<span style=3D"font-size:10.5pt;font-family:&quot;Calibri&quot;,&quot;sans-=
serif&quot;">How does it apply to extensions without encumbering the abilit=
y to extend unnecessarily?<o:p></o:p></span></li><li class=3D"MsoNormal" st=
yle=3D"color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-l=
ist:l0 level1 lfo1">
<span style=3D"font-size:10.5pt;font-family:&quot;Calibri&quot;,&quot;sans-=
serif&quot;">How would it scale to arbitrarily large number of endpoints?&n=
bsp;<o:p></o:p></span></li><li class=3D"MsoNormal" style=3D"color:black;mso=
-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<span style=3D"font-size:10.5pt;font-family:&quot;Calibri&quot;,&quot;sans-=
serif&quot;">How would SCIM transactions be &nbsp;encapsulated within other=
 protocols that take care of security like SAML?<o:p></o:p></span></li></ul=
>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">Chris.<o:p></o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,&quot;sans-serif&quot;;color:black">From:
</span></b><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,=
&quot;sans-serif&quot;;color:black">Shelley &lt;<a href=3D"mailto:randomshe=
lley@gmail.com">randomshelley@gmail.com</a>&gt;<br>
<b>Date: </b>Monday, 4 February, 2013 7:17 PM<br>
<b>To: </b>Kelly Grizzle &lt;<a href=3D"mailto:kelly.grizzle@sailpoint.com"=
>kelly.grizzle@sailpoint.com</a>&gt;<br>
<b>Cc: </b>&quot;<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a>&quot; &=
lt;<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a>&gt;<br>
<b>Subject: </b>Re: [scim] Normative Schema Representation Example<o:p></o:=
p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:10.5pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:bla=
ck">Thanks, Kelly.<br>
<br>
Reviewing this example also prompted a few additional questions that weren'=
t clear to me in the spec -<br>
<br>
* [Core Schema Attributes] Must service providers expose <i>all </i>attribu=
tes for User/Group as defined in the core schema? Or, is it acceptable for =
service providers to only declare/accept a subset of these attributes?<br>
<br>
* [Extension Schema Attributes] Similar to the previous question, must serv=
ice providers expose all attributes from schema extensions? Specifically, i=
n the example in 11.6, it looks like only one of the enterprise extension a=
ttributes is specified.<br>
<br>
* [Additional Attributes] Does SCIM prescribe or recommend an approach for =
handling unknown attributes provided by consumers (i.e. those that are not =
listed in the Resource Schema)? Given the schema-based nature of resources =
and the fact that providers may
 ignore POSTed content (per the SCIM Protocol 3.1), it seems that unknown a=
ttributes should likely be ignored (such that they are not persisted/return=
ed nor is an error returned).<br>
<br>
<o:p></o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black">On Mon, Feb 4, 2013 at 2:08=
 PM, Kelly Grizzle &lt;<a href=3D"mailto:kelly.grizzle@sailpoint.com" targe=
t=3D"_blank">kelly.grizzle@sailpoint.com</a>&gt; wrote:<o:p></o:p></span></=
p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">You&#8217;re right, Shelley.&nbsp; I op=
ened issue 34 to get this fixed.</span><span style=3D"color:black"><o:p></o=
:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><span style=3D"color:black=
"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D"><a href=3D"http://trac.tools.ietf.org/w=
g/scim/trac/ticket/34" target=3D"_blank">http://trac.tools.ietf.org/wg/scim=
/trac/ticket/34</a></span><span style=3D"color:black"><o:p></o:p></span></p=
>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><span style=3D"color:black=
"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">--Kelly</span><span style=3D"color:blac=
k"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><span style=3D"color:black=
"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><b><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,=
&quot;sans-serif&quot;;color:black">From:</span></b><span style=3D"font-siz=
e:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;;color:black"=
><a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@ie=
tf.org</a>
 [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bo=
unces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Monday, February 04, 2013 11:17 AM<br>
<b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> [scim] Normative Schema Representation Example</span><span =
style=3D"color:black"><o:p></o:p></span></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"color:black">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"color:black">The JSON schema representation in &quo=
t;11.6. Resource Schema Representation&quot; doesn't appear to be &quot;nor=
mative&quot; as indicated, since it merely provides an example
 Schema resource for a User. Should this be updated to a &quot;non-normativ=
e example&quot; instead?<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></p=
>
</div>
</div>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AB4446BLUPRD0412MB643_--

From olds@rbcon.com  Tue Feb  5 13:09:10 2013
Return-Path: <olds@rbcon.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3266E21F85D2 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:09:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GBr7Si+7+8iC for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:09:09 -0800 (PST)
Received: from mail-ob0-f179.google.com (mail-ob0-f179.google.com [209.85.214.179]) by ietfa.amsl.com (Postfix) with ESMTP id 81FC421F85B4 for <scim@ietf.org>; Tue,  5 Feb 2013 13:09:09 -0800 (PST)
Received: by mail-ob0-f179.google.com with SMTP id un3so684624obb.24 for <scim@ietf.org>; Tue, 05 Feb 2013 13:09:09 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding :x-gm-message-state; bh=LQNR3r/FBqIVgTLe7vzpmHymYfukEWtQ/gF9qDDIYs0=; b=Hk9yZaoU0vKwJjs1ZMLEAoQoguqz7feZGSsA0HxemVUTc/pby/Q9XS876XrsW/UpOt RmTyb0v70GYtdDiCpJfbMPhMJe9wykVu2Rl8FJ1c+eNL3vSCn84ogw9EgoqYlP4wPYus 6jYnpaInOrP/izRiXR4ERLvKAbkjQDFMiAQM0zPx9xPaTm6QX6k+PdrN54KMSBV6STqd kcS7KwShXiadaxk+YLpUEjgS9+CZUm5BfnwdRW88Xz+jPit+zwAFEnojhz/bv4TV/jMA x7x/2fKKrz01DXaiBFjoSURysWMLxkF3wcCuH3jrDG5gMqLKafUYs2XzgeUT1yEvPeKU WneQ==
X-Received: by 10.182.89.36 with SMTP id bl4mr19631747obb.22.1360098548997; Tue, 05 Feb 2013 13:09:08 -0800 (PST)
Received: from [10.40.32.89] ([173.243.48.220]) by mx.google.com with ESMTPS id y4sm27109064oea.7.2013.02.05.13.09.07 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 05 Feb 2013 13:09:08 -0800 (PST)
Message-ID: <511174F2.2070507@rbcon.com>
Date: Tue, 05 Feb 2013 13:09:06 -0800
From: Dale Olds <olds@rbcon.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130106 Thunderbird/17.0.2
MIME-Version: 1.0
To: scim@ietf.org
References: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com>
In-Reply-To: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Gm-Message-State: ALoCoQnczkAvJ/qRauZH2khRkAp5UbBM5ShifPhiQkt4UVrh6tz4SKoxWHrxrPCrPv8ot2I5kLGK
Subject: Re: [scim] Adding a predefined userId - "me"
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 21:09:10 -0000

I don't think it would be a good idea to have special userids for such a 
purpose, but I do see this as related to a larger issue with SCIM: only 
specifying an object by type and ID in the path makes the protocol 
chatty and access control more difficult.

In our implementation, we have had great difficulties in settling on an 
intuitive access control policy that allows applications to manage users 
and groups by name via SCIM. So, while I agree with these design goals 
for SCIM:

1) the only immutable identifier for a resource is an ID assigned by the 
server
2) access control policy and enforcement is outside of scope for SCIM 
(except, of course, for defining the groups attribute on a user as 
read-only :-) )

I am also interested in future discussion to allow an object to be 
updated without knowing the type and resource ID in advance.

We solved your particular use case by using the /user_info endpoint from 
OpenID Connect, and since I see you are using bearer tokens, you might 
look at that as well.

--Dale

On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:
> With the current spec - to get the details of a specific user we use 
> the following...
>
>  GET /Users/2819c223-7f76-453a-919d-413861904646
>  Host: example.com <http://example.com>
>  Accept: application/json
>  Authorization: Bearer h480djs93hd8
>
> How about having a pre-defined userid - which will provide back the 
> logged in users info.
>
>  GET /Users/me
>  Host: example.com <http://example.com>
>  Accept: application/json
>  Authorization: Bearer h480djs93hd8
>
> In the above case - the information about the user corresponding to 
> the provided Bearer token will be returned back. This would be similar 
> to Facebook's Graph API.
>
> Appreciate your thoughts/suggestions...
>
> Thanks & Regards,
> Prabath
>
> Mobile : +94 71 809 6732
>
> http://blog.facilelogin.com
> http://RampartFAQ.com
>
>
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim


From prabath@wso2.com  Tue Feb  5 13:09:44 2013
Return-Path: <prabath@wso2.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 032C921F85B4 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:09:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.206
X-Spam-Level: 
X-Spam-Status: No, score=-1.206 tagged_above=-999 required=5 tests=[AWL=0.104,  BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, SARE_HTML_USL_OBFU=1.666]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NCyC2EgZZUiA for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:09:43 -0800 (PST)
Received: from mail-ea0-f176.google.com (mail-ea0-f176.google.com [209.85.215.176]) by ietfa.amsl.com (Postfix) with ESMTP id D98BF21F85D2 for <scim@ietf.org>; Tue,  5 Feb 2013 13:09:42 -0800 (PST)
Received: by mail-ea0-f176.google.com with SMTP id a13so298522eaa.35 for <scim@ietf.org>; Tue, 05 Feb 2013 13:09:42 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:x-gm-message-state; bh=Fu0Z6lnj41oiGPQefizfBuQ0LqGBuapCyh0HgIbgiio=; b=iGFaVr9W7mM+alN5y+I/l3tH+nzaLpTeZ1WTcn1OrYfKrJZ+8CNBFhShPpcsddiwgW YLk+/PGv5FvccDLjyvDLvky8bwft+e5nJ82p7zNfVFn4yWvgtDmKIINDc3cbKRf6tjoR 2VqwrxcOFjV4ZV7xhssu2VlxgxAy5QHcSlrR8oG8bmpxkMxv0k4cf+9oM1zY5G18ByAw vEDGSF07W0fqqFU6zG5XvWpOq4cBvjCXqbRlN57xQZ6tsO9Jzy/iL7CdLxoQAAd3PuGo g2yq5NDDQH7Ywa1mxHIid3KU3UFfKrUSm052TpdVPhjlVa1ER3/GQ/udRTmkMGZGhc70 qbXQ==
MIME-Version: 1.0
X-Received: by 10.14.173.196 with SMTP id v44mr88022521eel.29.1360098581717; Tue, 05 Feb 2013 13:09:41 -0800 (PST)
Received: by 10.223.175.134 with HTTP; Tue, 5 Feb 2013 13:09:41 -0800 (PST)
In-Reply-To: <511174F2.2070507@rbcon.com>
References: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com> <511174F2.2070507@rbcon.com>
Date: Wed, 6 Feb 2013 02:39:41 +0530
Message-ID: <CAJV9qO-D3xYwA3-KYM6H6EoNoFGTLuTcXX1vooTHztv0cp9Q_g@mail.gmail.com>
From: Prabath Siriwardena <prabath@wso2.com>
To: Dale Olds <olds@rbcon.com>
Content-Type: multipart/alternative; boundary=047d7b604368d2a20c04d500a0e8
X-Gm-Message-State: ALoCoQmPU73PXpR1XqPzAckQxOX06IODWp74/mHKnhKwz5JkT15jRYoGZFx2qlyql21awIDnfB9/
Cc: scim@ietf.org
Subject: Re: [scim] Adding a predefined userId - "me"
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 21:09:44 -0000

--047d7b604368d2a20c04d500a0e8
Content-Type: text/plain; charset=ISO-8859-1

Yes of course this is solved in OpenID Connect..  While writing [1] I
thought SCIM would also adress this concern to some extent by standardizing
this..

[1]:
http://blog.facilelogin.com/2013/02/why-oauth-it-self-is-not-authentication.html

Thanks & regards,
-Prabath

On Wed, Feb 6, 2013 at 2:39 AM, Dale Olds <olds@rbcon.com> wrote:

> I don't think it would be a good idea to have special userids for such a
> purpose, but I do see this as related to a larger issue with SCIM: only
> specifying an object by type and ID in the path makes the protocol chatty
> and access control more difficult.
>
> In our implementation, we have had great difficulties in settling on an
> intuitive access control policy that allows applications to manage users
> and groups by name via SCIM. So, while I agree with these design goals for
> SCIM:
>
> 1) the only immutable identifier for a resource is an ID assigned by the
> server
> 2) access control policy and enforcement is outside of scope for SCIM
> (except, of course, for defining the groups attribute on a user as
> read-only :-) )
>
> I am also interested in future discussion to allow an object to be updated
> without knowing the type and resource ID in advance.
>
> We solved your particular use case by using the /user_info endpoint from
> OpenID Connect, and since I see you are using bearer tokens, you might look
> at that as well.
>
> --Dale
>
> On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:
>
>> With the current spec - to get the details of a specific user we use the
>> following...
>>
>>  GET /Users/2819c223-7f76-453a-**919d-413861904646
>>  Host: example.com <http://example.com>
>>
>>  Accept: application/json
>>  Authorization: Bearer h480djs93hd8
>>
>> How about having a pre-defined userid - which will provide back the
>> logged in users info.
>>
>>  GET /Users/me
>>  Host: example.com <http://example.com>
>>
>>  Accept: application/json
>>  Authorization: Bearer h480djs93hd8
>>
>> In the above case - the information about the user corresponding to the
>> provided Bearer token will be returned back. This would be similar to
>> Facebook's Graph API.
>>
>> Appreciate your thoughts/suggestions...
>>
>> Thanks & Regards,
>> Prabath
>>
>> Mobile : +94 71 809 6732
>>
>> http://blog.facilelogin.com
>> http://RampartFAQ.com
>>
>>
>> ______________________________**_________________
>> scim mailing list
>> scim@ietf.org
>> https://www.ietf.org/mailman/**listinfo/scim<https://www.ietf.org/mailman/listinfo/scim>
>>
>
> ______________________________**_________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/**listinfo/scim<https://www.ietf.org/mailman/listinfo/scim>
>



-- 
Thanks & Regards,
Prabath

Mobile : +94 71 809 6732

http://blog.facilelogin.com
http://RampartFAQ.com

--047d7b604368d2a20c04d500a0e8
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<span style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:1=
2.727272033691406px;background-color:rgb(255,255,255)">Yes of course this i=
s solved in OpenID Connect.. =A0While writing [1] I thought SCIM would also=
 adress this concern to some extent by standardizing this..</span><div styl=
e=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.72727203=
3691406px;background-color:rgb(255,255,255)">
<br></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;fo=
nt-size:12.727272033691406px;background-color:rgb(255,255,255)">[1]:=A0<a h=
ref=3D"http://blog.facilelogin.com/2013/02/why-oauth-it-self-is-not-authent=
ication.html" target=3D"_blank" style=3D"color:rgb(17,85,204)">http://blog.=
facilelogin.com/2013/02/why-oauth-it-self-is-not-authentication.html</a></d=
iv>
<div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12=
.727272033691406px;background-color:rgb(255,255,255)"><br></div><div style=
=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.727272033=
691406px;background-color:rgb(255,255,255)">
Thanks &amp; regards,</div><div style=3D"color:rgb(34,34,34);font-family:ar=
ial,sans-serif;font-size:12.727272033691406px;background-color:rgb(255,255,=
255)">-Prabath</div><br><div class=3D"gmail_quote">On Wed, Feb 6, 2013 at 2=
:39 AM, Dale Olds <span dir=3D"ltr">&lt;<a href=3D"mailto:olds@rbcon.com" t=
arget=3D"_blank">olds@rbcon.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div class=3D"im">I don&#39;t think it would=
 be a good idea to have special userids for such a purpose, but I do see th=
is as related to a larger issue with SCIM: only specifying an object by typ=
e and ID in the path makes the protocol chatty and access control more diff=
icult.<br>

<br>
In our implementation, we have had great difficulties in settling on an int=
uitive access control policy that allows applications to manage users and g=
roups by name via SCIM. So, while I agree with these design goals for SCIM:=
<br>

<br>
1) the only immutable identifier for a resource is an ID assigned by the se=
rver<br>
2) access control policy and enforcement is outside of scope for SCIM (exce=
pt, of course, for defining the groups attribute on a user as read-only :-)=
 )<br>
<br>
I am also interested in future discussion to allow an object to be updated =
without knowing the type and resource ID in advance.<br>
<br>
We solved your particular use case by using the /user_info endpoint from Op=
enID Connect, and since I see you are using bearer tokens, you might look a=
t that as well.<br>
<br>
--Dale<br>
<br>
On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:<br>
</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-l=
eft:1px #ccc solid;padding-left:1ex"><div class=3D"im">
With the current spec - to get the details of a specific user we use the fo=
llowing...<br>
<br>
=A0GET /Users/2819c223-7f76-453a-<u></u>919d-413861904646<br></div>
=A0Host: <a href=3D"http://example.com" target=3D"_blank">example.com</a> &=
lt;<a href=3D"http://example.com" target=3D"_blank">http://example.com</a>&=
gt;<div class=3D"im"><br>
=A0Accept: application/json<br>
=A0Authorization: Bearer h480djs93hd8<br>
<br>
How about having a pre-defined userid - which will provide back the logged =
in users info.<br>
<br>
=A0GET /Users/me<br></div>
=A0Host: <a href=3D"http://example.com" target=3D"_blank">example.com</a> &=
lt;<a href=3D"http://example.com" target=3D"_blank">http://example.com</a>&=
gt;<div class=3D"im"><br>
=A0Accept: application/json<br>
=A0Authorization: Bearer h480djs93hd8<br>
<br>
In the above case - the information about the user corresponding to the pro=
vided Bearer token will be returned back. This would be similar to Facebook=
&#39;s Graph API.<br>
<br>
Appreciate your thoughts/suggestions...<br>
<br>
Thanks &amp; Regards,<br>
Prabath<br>
<br>
Mobile : <a href=3D"tel:%2B94%2071%20809%206732" value=3D"+94718096732" tar=
get=3D"_blank">+94 71 809 6732</a><br>
<br>
<a href=3D"http://blog.facilelogin.com" target=3D"_blank">http://blog.facil=
elogin.com</a><br>
<a href=3D"http://RampartFAQ.com" target=3D"_blank">http://RampartFAQ.com</=
a><br>
<br>
<br></div><div class=3D"im">
______________________________<u></u>_________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim" target=3D"_blank">ht=
tps://www.ietf.org/mailman/<u></u>listinfo/scim</a><br>
</div></blockquote><div class=3D"HOEnZb"><div class=3D"h5">
<br>
______________________________<u></u>_________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim" target=3D"_blank">ht=
tps://www.ietf.org/mailman/<u></u>listinfo/scim</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
Thanks &amp; Regards,<br>Prabath<div><br></div><div>Mobile : +94 71 809 673=
2=A0<br><br><a href=3D"http://blog.facilelogin.com" target=3D"_blank">http:=
//blog.facilelogin.com</a><br>
<a href=3D"http://RampartFAQ.com" target=3D"_blank">http://RampartFAQ.com</=
a></div>

--047d7b604368d2a20c04d500a0e8--

From phil.hunt@oracle.com  Tue Feb  5 13:32:54 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A04C621F88E1 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:32:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.274
X-Spam-Level: 
X-Spam-Status: No, score=-6.274 tagged_above=-999 required=5 tests=[AWL=0.325,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Le8z9yV3pvC7 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:32:54 -0800 (PST)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id D6B7021F88B0 for <scim@ietf.org>; Tue,  5 Feb 2013 13:32:53 -0800 (PST)
Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r15LWqnR013679 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 5 Feb 2013 21:32:53 GMT
Received: from acsmt358.oracle.com (acsmt358.oracle.com [141.146.40.158]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r15LWp4K016622 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 5 Feb 2013 21:32:52 GMT
Received: from abhmt103.oracle.com (abhmt103.oracle.com [141.146.116.55]) by acsmt358.oracle.com (8.12.11.20060308/8.12.11) with ESMTP id r15LWp8o006189; Tue, 5 Feb 2013 15:32:51 -0600
Received: from [192.168.1.14] (/24.85.226.208) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 05 Feb 2013 13:32:51 -0800
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: text/plain; charset=us-ascii
From: Phil Hunt <phil.hunt@oracle.com>
In-Reply-To: <511174F2.2070507@rbcon.com>
Date: Tue, 5 Feb 2013 13:32:50 -0800
Content-Transfer-Encoding: quoted-printable
Message-Id: <B1F6933D-A9B8-41B9-81AE-6F66BD94B8EA@oracle.com>
References: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com> <511174F2.2070507@rbcon.com>
To: Dale Olds <olds@rbcon.com>
X-Mailer: Apple Mail (2.1283)
X-Source-IP: ucsinet21.oracle.com [156.151.31.93]
Cc: scim@ietf.org
Subject: Re: [scim] Adding a predefined userId - "me"
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 21:32:54 -0000

There is also the issue of what me or "self" points to given all of the =
OAuth scenarios.  Is it the resource owner, the client_id, what is =
meant? What happens with a client acting on its own authority -- self =
means the client?

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com





On 2013-02-05, at 1:09 PM, Dale Olds wrote:

> I don't think it would be a good idea to have special userids for such =
a purpose, but I do see this as related to a larger issue with SCIM: =
only specifying an object by type and ID in the path makes the protocol =
chatty and access control more difficult.
>=20
> In our implementation, we have had great difficulties in settling on =
an intuitive access control policy that allows applications to manage =
users and groups by name via SCIM. So, while I agree with these design =
goals for SCIM:
>=20
> 1) the only immutable identifier for a resource is an ID assigned by =
the server
> 2) access control policy and enforcement is outside of scope for SCIM =
(except, of course, for defining the groups attribute on a user as =
read-only :-) )
>=20
> I am also interested in future discussion to allow an object to be =
updated without knowing the type and resource ID in advance.
>=20
> We solved your particular use case by using the /user_info endpoint =
from OpenID Connect, and since I see you are using bearer tokens, you =
might look at that as well.
>=20
> --Dale
>=20
> On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:
>> With the current spec - to get the details of a specific user we use =
the following...
>>=20
>> GET /Users/2819c223-7f76-453a-919d-413861904646
>> Host: example.com <http://example.com>
>> Accept: application/json
>> Authorization: Bearer h480djs93hd8
>>=20
>> How about having a pre-defined userid - which will provide back the =
logged in users info.
>>=20
>> GET /Users/me
>> Host: example.com <http://example.com>
>> Accept: application/json
>> Authorization: Bearer h480djs93hd8
>>=20
>> In the above case - the information about the user corresponding to =
the provided Bearer token will be returned back. This would be similar =
to Facebook's Graph API.
>>=20
>> Appreciate your thoughts/suggestions...
>>=20
>> Thanks & Regards,
>> Prabath
>>=20
>> Mobile : +94 71 809 6732
>>=20
>> http://blog.facilelogin.com
>> http://RampartFAQ.com
>>=20
>>=20
>> _______________________________________________
>> scim mailing list
>> scim@ietf.org
>> https://www.ietf.org/mailman/listinfo/scim
>=20
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim


From prabath@wso2.com  Tue Feb  5 13:34:53 2013
Return-Path: <prabath@wso2.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E027C21F88E1 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:34:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.06
X-Spam-Level: 
X-Spam-Status: No, score=-2.06 tagged_above=-999 required=5 tests=[AWL=0.916,  BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lqybFWAS6AHN for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:34:52 -0800 (PST)
Received: from mail-ea0-f177.google.com (mail-ea0-f177.google.com [209.85.215.177]) by ietfa.amsl.com (Postfix) with ESMTP id 79F9C21F88B0 for <scim@ietf.org>; Tue,  5 Feb 2013 13:34:52 -0800 (PST)
Received: by mail-ea0-f177.google.com with SMTP id n13so285086eaa.22 for <scim@ietf.org>; Tue, 05 Feb 2013 13:34:51 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:x-gm-message-state; bh=r0jhji1FOjrn26xRJZ7BiVaNHjY71t7HwW4K0OTYJdk=; b=j5w2XugAQpjbpAnOuETQWD934mqRSeLBoKiDJW7cuUf+gR+LzYZRRomKWTH9N4qhSw nnjipFheFSXr8ziIO6M1enFLcy8fRhYFmXfZLHcyydLaYRuJ9dK7jjuyZhM58LMcJ0qo udO8aJ1jtSYS77BY+VMq4+lWHayH6j2odowH5wye98gODCGMSsLLLoDVszpnIsU+Zu7B uiuOjPOn236PyWGA398F/4VjBFSiinuAUF/jChPsAh5JavO3HKYmvdXHjPD26HFGWS3K 2k64oNtioR3c1GiTELu+Zd6rLy6M/YBKKtqDY3yYI+kzhtP1EPzX2YfgKo97veZEihjs AhWw==
MIME-Version: 1.0
X-Received: by 10.14.173.196 with SMTP id v44mr88246405eel.29.1360100091050; Tue, 05 Feb 2013 13:34:51 -0800 (PST)
Received: by 10.223.175.134 with HTTP; Tue, 5 Feb 2013 13:34:50 -0800 (PST)
In-Reply-To: <B1F6933D-A9B8-41B9-81AE-6F66BD94B8EA@oracle.com>
References: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com> <511174F2.2070507@rbcon.com> <B1F6933D-A9B8-41B9-81AE-6F66BD94B8EA@oracle.com>
Date: Wed, 6 Feb 2013 03:04:50 +0530
Message-ID: <CAJV9qO9B_XO4VG-j3utw8AdMmD=iEkVLoKiQY9T8_jrJcCEi9g@mail.gmail.com>
From: Prabath Siriwardena <prabath@wso2.com>
To: Phil Hunt <phil.hunt@oracle.com>
Content-Type: multipart/alternative; boundary=047d7b604368c93c3404d500faeb
X-Gm-Message-State: ALoCoQlG89xedjtbZ2iphs7rBw8Q1VErNaJfRliVpFVrLzE7SbB8HbBvvNmsZ5dmwDALLHb40N/z
Cc: Dale Olds <olds@rbcon.com>, scim@ietf.org
Subject: Re: [scim] Adding a predefined userId - "me"
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 21:34:54 -0000

--047d7b604368c93c3404d500faeb
Content-Type: text/plain; charset=ISO-8859-1

I guess we need not to worry about the grant types.. me or self would mean
the user corresponding to the access_token..

Thanks & regards,
-Prabath

On Wed, Feb 6, 2013 at 3:02 AM, Phil Hunt <phil.hunt@oracle.com> wrote:

> There is also the issue of what me or "self" points to given all of the
> OAuth scenarios.  Is it the resource owner, the client_id, what is meant?
> What happens with a client acting on its own authority -- self means the
> client?
>
> Phil
>
> @independentid
> www.independentid.com
> phil.hunt@oracle.com
>
>
>
>
>
> On 2013-02-05, at 1:09 PM, Dale Olds wrote:
>
> > I don't think it would be a good idea to have special userids for such a
> purpose, but I do see this as related to a larger issue with SCIM: only
> specifying an object by type and ID in the path makes the protocol chatty
> and access control more difficult.
> >
> > In our implementation, we have had great difficulties in settling on an
> intuitive access control policy that allows applications to manage users
> and groups by name via SCIM. So, while I agree with these design goals for
> SCIM:
> >
> > 1) the only immutable identifier for a resource is an ID assigned by the
> server
> > 2) access control policy and enforcement is outside of scope for SCIM
> (except, of course, for defining the groups attribute on a user as
> read-only :-) )
> >
> > I am also interested in future discussion to allow an object to be
> updated without knowing the type and resource ID in advance.
> >
> > We solved your particular use case by using the /user_info endpoint from
> OpenID Connect, and since I see you are using bearer tokens, you might look
> at that as well.
> >
> > --Dale
> >
> > On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:
> >> With the current spec - to get the details of a specific user we use
> the following...
> >>
> >> GET /Users/2819c223-7f76-453a-919d-413861904646
> >> Host: example.com <http://example.com>
> >> Accept: application/json
> >> Authorization: Bearer h480djs93hd8
> >>
> >> How about having a pre-defined userid - which will provide back the
> logged in users info.
> >>
> >> GET /Users/me
> >> Host: example.com <http://example.com>
> >> Accept: application/json
> >> Authorization: Bearer h480djs93hd8
> >>
> >> In the above case - the information about the user corresponding to the
> provided Bearer token will be returned back. This would be similar to
> Facebook's Graph API.
> >>
> >> Appreciate your thoughts/suggestions...
> >>
> >> Thanks & Regards,
> >> Prabath
> >>
> >> Mobile : +94 71 809 6732
> >>
> >> http://blog.facilelogin.com
> >> http://RampartFAQ.com
> >>
> >>
> >> _______________________________________________
> >> scim mailing list
> >> scim@ietf.org
> >> https://www.ietf.org/mailman/listinfo/scim
> >
> > _______________________________________________
> > scim mailing list
> > scim@ietf.org
> > https://www.ietf.org/mailman/listinfo/scim
>
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim
>



-- 
Thanks & Regards,
Prabath

Mobile : +94 71 809 6732

http://blog.facilelogin.com
http://RampartFAQ.com

--047d7b604368c93c3404d500faeb
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I guess we need not to worry about the grant types.. me or self would mean =
the user corresponding to the access_token..<div><br></div><div>Thanks &amp=
; regards,</div><div>-Prabath<br><br><div class=3D"gmail_quote">On Wed, Feb=
 6, 2013 at 3:02 AM, Phil Hunt <span dir=3D"ltr">&lt;<a href=3D"mailto:phil=
.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>&gt;</span> wro=
te:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">There is also the issue of what me or &quot;=
self&quot; points to given all of the OAuth scenarios. =A0Is it the resourc=
e owner, the client_id, what is meant? What happens with a client acting on=
 its own authority -- self means the client?<br>

<br>
Phil<br>
<br>
@independentid<br>
<a href=3D"http://www.independentid.com" target=3D"_blank">www.independenti=
d.com</a><br>
<a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
<br>
<br>
<br>
<br>
On 2013-02-05, at 1:09 PM, Dale Olds wrote:<br>
<br>
&gt; I don&#39;t think it would be a good idea to have special userids for =
such a purpose, but I do see this as related to a larger issue with SCIM: o=
nly specifying an object by type and ID in the path makes the protocol chat=
ty and access control more difficult.<br>

&gt;<br>
&gt; In our implementation, we have had great difficulties in settling on a=
n intuitive access control policy that allows applications to manage users =
and groups by name via SCIM. So, while I agree with these design goals for =
SCIM:<br>

&gt;<br>
&gt; 1) the only immutable identifier for a resource is an ID assigned by t=
he server<br>
&gt; 2) access control policy and enforcement is outside of scope for SCIM =
(except, of course, for defining the groups attribute on a user as read-onl=
y :-) )<br>
&gt;<br>
&gt; I am also interested in future discussion to allow an object to be upd=
ated without knowing the type and resource ID in advance.<br>
&gt;<br>
&gt; We solved your particular use case by using the /user_info endpoint fr=
om OpenID Connect, and since I see you are using bearer tokens, you might l=
ook at that as well.<br>
&gt;<br>
&gt; --Dale<br>
&gt;<br>
&gt; On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:<br>
&gt;&gt; With the current spec - to get the details of a specific user we u=
se the following...<br>
&gt;&gt;<br>
&gt;&gt; GET /Users/2819c223-7f76-453a-919d-413861904646<br>
&gt;&gt; Host: <a href=3D"http://example.com" target=3D"_blank">example.com=
</a> &lt;<a href=3D"http://example.com" target=3D"_blank">http://example.co=
m</a>&gt;<br>
&gt;&gt; Accept: application/json<br>
&gt;&gt; Authorization: Bearer h480djs93hd8<br>
&gt;&gt;<br>
&gt;&gt; How about having a pre-defined userid - which will provide back th=
e logged in users info.<br>
&gt;&gt;<br>
&gt;&gt; GET /Users/me<br>
&gt;&gt; Host: <a href=3D"http://example.com" target=3D"_blank">example.com=
</a> &lt;<a href=3D"http://example.com" target=3D"_blank">http://example.co=
m</a>&gt;<br>
&gt;&gt; Accept: application/json<br>
&gt;&gt; Authorization: Bearer h480djs93hd8<br>
&gt;&gt;<br>
&gt;&gt; In the above case - the information about the user corresponding t=
o the provided Bearer token will be returned back. This would be similar to=
 Facebook&#39;s Graph API.<br>
&gt;&gt;<br>
&gt;&gt; Appreciate your thoughts/suggestions...<br>
&gt;&gt;<br>
&gt;&gt; Thanks &amp; Regards,<br>
&gt;&gt; Prabath<br>
&gt;&gt;<br>
&gt;&gt; Mobile : <a href=3D"tel:%2B94%2071%20809%206732" value=3D"+9471809=
6732">+94 71 809 6732</a><br>
&gt;&gt;<br>
&gt;&gt; <a href=3D"http://blog.facilelogin.com" target=3D"_blank">http://b=
log.facilelogin.com</a><br>
&gt;&gt; <a href=3D"http://RampartFAQ.com" target=3D"_blank">http://Rampart=
FAQ.com</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; scim mailing list<br>
&gt;&gt; <a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/scim" target=3D"_=
blank">https://www.ietf.org/mailman/listinfo/scim</a><br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; scim mailing list<br>
&gt; <a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/scim" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/scim</a><br>
<br>
_______________________________________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/scim</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
Thanks &amp; Regards,<br>Prabath<div><br></div><div>Mobile : +94 71 809 673=
2=A0<br><br><a href=3D"http://blog.facilelogin.com" target=3D"_blank">http:=
//blog.facilelogin.com</a><br>
<a href=3D"http://RampartFAQ.com" target=3D"_blank">http://RampartFAQ.com</=
a></div>
</div>

--047d7b604368c93c3404d500faeb--

From phil.hunt@oracle.com  Tue Feb  5 13:42:29 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20E7921F8484 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:42:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.32
X-Spam-Level: 
X-Spam-Status: No, score=-6.32 tagged_above=-999 required=5 tests=[AWL=0.278,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nvc2ahcaRTzr for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 13:42:28 -0800 (PST)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id F29AE21F8477 for <scim@ietf.org>; Tue,  5 Feb 2013 13:42:27 -0800 (PST)
Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r15LgQ55014987 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 5 Feb 2013 21:42:27 GMT
Received: from acsmt356.oracle.com (acsmt356.oracle.com [141.146.40.156]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r15LgPUU016562 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 5 Feb 2013 21:42:26 GMT
Received: from abhmt113.oracle.com (abhmt113.oracle.com [141.146.116.65]) by acsmt356.oracle.com (8.12.11.20060308/8.12.11) with ESMTP id r15LgP2a017025; Tue, 5 Feb 2013 15:42:25 -0600
Received: from [192.168.1.14] (/24.85.226.208) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 05 Feb 2013 13:42:25 -0800
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: multipart/alternative; boundary="Apple-Mail=_119ED0E8-3C27-4AC8-9956-CC527C9CFC61"
From: Phil Hunt <phil.hunt@oracle.com>
In-Reply-To: <CAJV9qO9B_XO4VG-j3utw8AdMmD=iEkVLoKiQY9T8_jrJcCEi9g@mail.gmail.com>
Date: Tue, 5 Feb 2013 13:42:24 -0800
Message-Id: <B794536D-7763-4DF1-BABB-C1B2D21EADEF@oracle.com>
References: <CAJV9qO9yLWO5TN7FYhaVERHGCM=LsccHxEeu7-fERU5b9iKq+Q@mail.gmail.com> <511174F2.2070507@rbcon.com> <B1F6933D-A9B8-41B9-81AE-6F66BD94B8EA@oracle.com> <CAJV9qO9B_XO4VG-j3utw8AdMmD=iEkVLoKiQY9T8_jrJcCEi9g@mail.gmail.com>
To: Prabath Siriwardena <prabath@wso2.com>
X-Mailer: Apple Mail (2.1283)
X-Source-IP: ucsinet22.oracle.com [156.151.31.94]
Cc: Dale Olds <olds@rbcon.com>, scim@ietf.org
Subject: Re: [scim] Adding a predefined userId - "me"
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2013 21:42:29 -0000

--Apple-Mail=_119ED0E8-3C27-4AC8-9956-CC527C9CFC61
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=iso-8859-1

That's my point. Depending on the grant type, there may or may not be a =
corresponding 'user'.  Sometimes, the client is just acting on its own =
credential.

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com





On 2013-02-05, at 1:34 PM, Prabath Siriwardena wrote:

> I guess we need not to worry about the grant types.. me or self would =
mean the user corresponding to the access_token..
>=20
> Thanks & regards,
> -Prabath
>=20
> On Wed, Feb 6, 2013 at 3:02 AM, Phil Hunt <phil.hunt@oracle.com> =
wrote:
> There is also the issue of what me or "self" points to given all of =
the OAuth scenarios.  Is it the resource owner, the client_id, what is =
meant? What happens with a client acting on its own authority -- self =
means the client?
>=20
> Phil
>=20
> @independentid
> www.independentid.com
> phil.hunt@oracle.com
>=20
>=20
>=20
>=20
>=20
> On 2013-02-05, at 1:09 PM, Dale Olds wrote:
>=20
> > I don't think it would be a good idea to have special userids for =
such a purpose, but I do see this as related to a larger issue with =
SCIM: only specifying an object by type and ID in the path makes the =
protocol chatty and access control more difficult.
> >
> > In our implementation, we have had great difficulties in settling on =
an intuitive access control policy that allows applications to manage =
users and groups by name via SCIM. So, while I agree with these design =
goals for SCIM:
> >
> > 1) the only immutable identifier for a resource is an ID assigned by =
the server
> > 2) access control policy and enforcement is outside of scope for =
SCIM (except, of course, for defining the groups attribute on a user as =
read-only :-) )
> >
> > I am also interested in future discussion to allow an object to be =
updated without knowing the type and resource ID in advance.
> >
> > We solved your particular use case by using the /user_info endpoint =
from OpenID Connect, and since I see you are using bearer tokens, you =
might look at that as well.
> >
> > --Dale
> >
> > On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:
> >> With the current spec - to get the details of a specific user we =
use the following...
> >>
> >> GET /Users/2819c223-7f76-453a-919d-413861904646
> >> Host: example.com <http://example.com>
> >> Accept: application/json
> >> Authorization: Bearer h480djs93hd8
> >>
> >> How about having a pre-defined userid - which will provide back the =
logged in users info.
> >>
> >> GET /Users/me
> >> Host: example.com <http://example.com>
> >> Accept: application/json
> >> Authorization: Bearer h480djs93hd8
> >>
> >> In the above case - the information about the user corresponding to =
the provided Bearer token will be returned back. This would be similar =
to Facebook's Graph API.
> >>
> >> Appreciate your thoughts/suggestions...
> >>
> >> Thanks & Regards,
> >> Prabath
> >>
> >> Mobile : +94 71 809 6732
> >>
> >> http://blog.facilelogin.com
> >> http://RampartFAQ.com
> >>
> >>
> >> _______________________________________________
> >> scim mailing list
> >> scim@ietf.org
> >> https://www.ietf.org/mailman/listinfo/scim
> >
> > _______________________________________________
> > scim mailing list
> > scim@ietf.org
> > https://www.ietf.org/mailman/listinfo/scim
>=20
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim
>=20
>=20
>=20
> --=20
> Thanks & Regards,
> Prabath
>=20
> Mobile : +94 71 809 6732=20
>=20
> http://blog.facilelogin.com
> http://RampartFAQ.com
> _______________________________________________
> scim mailing list
> scim@ietf.org
> https://www.ietf.org/mailman/listinfo/scim


--Apple-Mail=_119ED0E8-3C27-4AC8-9956-CC527C9CFC61
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=iso-8859-1

<html><head></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
">That's my point. Depending on the grant type, there may or may not be =
a corresponding 'user'. &nbsp;Sometimes, the client is just acting on =
its own credential.<div><br><div apple-content-edited=3D"true">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; =
color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; =
line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; =
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span =
class=3D"Apple-style-span" style=3D"border-collapse: separate; color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: =
normal; font-variant: normal; font-weight: normal; letter-spacing: =
normal; line-height: normal; orphans: 2; text-indent: 0px; =
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: medium; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; =
"><div><div><div>Phil</div><div><br></div><div>@independentid</div><div><a=
 =
href=3D"http://www.independentid.com">www.independentid.com</a></div></div=
></div></div></span><a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br><br></div=
></span><br class=3D"Apple-interchange-newline"></div></span><br =
class=3D"Apple-interchange-newline"></span><br =
class=3D"Apple-interchange-newline">
</div>
<br><div><div>On 2013-02-05, at 1:34 PM, Prabath Siriwardena =
wrote:</div><br class=3D"Apple-interchange-newline"><blockquote =
type=3D"cite">I guess we need not to worry about the grant types.. me or =
self would mean the user corresponding to the =
access_token..<div><br></div><div>Thanks &amp; =
regards,</div><div>-Prabath<br><br><div class=3D"gmail_quote">On Wed, =
Feb 6, 2013 at 3:02 AM, Phil Hunt <span dir=3D"ltr">&lt;<a =
href=3D"mailto:phil.hunt@oracle.com" =
target=3D"_blank">phil.hunt@oracle.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex">There is also the =
issue of what me or "self" points to given all of the OAuth scenarios. =
&nbsp;Is it the resource owner, the client_id, what is meant? What =
happens with a client acting on its own authority -- self means the =
client?<br>

<br>
Phil<br>
<br>
@independentid<br>
<a href=3D"http://www.independentid.com/" =
target=3D"_blank">www.independentid.com</a><br>
<a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
<br>
<br>
<br>
<br>
On 2013-02-05, at 1:09 PM, Dale Olds wrote:<br>
<br>
&gt; I don't think it would be a good idea to have special userids for =
such a purpose, but I do see this as related to a larger issue with =
SCIM: only specifying an object by type and ID in the path makes the =
protocol chatty and access control more difficult.<br>

&gt;<br>
&gt; In our implementation, we have had great difficulties in settling =
on an intuitive access control policy that allows applications to manage =
users and groups by name via SCIM. So, while I agree with these design =
goals for SCIM:<br>

&gt;<br>
&gt; 1) the only immutable identifier for a resource is an ID assigned =
by the server<br>
&gt; 2) access control policy and enforcement is outside of scope for =
SCIM (except, of course, for defining the groups attribute on a user as =
read-only :-) )<br>
&gt;<br>
&gt; I am also interested in future discussion to allow an object to be =
updated without knowing the type and resource ID in advance.<br>
&gt;<br>
&gt; We solved your particular use case by using the /user_info endpoint =
from OpenID Connect, and since I see you are using bearer tokens, you =
might look at that as well.<br>
&gt;<br>
&gt; --Dale<br>
&gt;<br>
&gt; On 02/05/2013 11:10 AM, Prabath Siriwardena wrote:<br>
&gt;&gt; With the current spec - to get the details of a specific user =
we use the following...<br>
&gt;&gt;<br>
&gt;&gt; GET /Users/2819c223-7f76-453a-919d-413861904646<br>
&gt;&gt; Host: <a href=3D"http://example.com/" =
target=3D"_blank">example.com</a> &lt;<a href=3D"http://example.com/" =
target=3D"_blank">http://example.com</a>&gt;<br>
&gt;&gt; Accept: application/json<br>
&gt;&gt; Authorization: Bearer h480djs93hd8<br>
&gt;&gt;<br>
&gt;&gt; How about having a pre-defined userid - which will provide back =
the logged in users info.<br>
&gt;&gt;<br>
&gt;&gt; GET /Users/me<br>
&gt;&gt; Host: <a href=3D"http://example.com/" =
target=3D"_blank">example.com</a> &lt;<a href=3D"http://example.com/" =
target=3D"_blank">http://example.com</a>&gt;<br>
&gt;&gt; Accept: application/json<br>
&gt;&gt; Authorization: Bearer h480djs93hd8<br>
&gt;&gt;<br>
&gt;&gt; In the above case - the information about the user =
corresponding to the provided Bearer token will be returned back. This =
would be similar to Facebook's Graph API.<br>
&gt;&gt;<br>
&gt;&gt; Appreciate your thoughts/suggestions...<br>
&gt;&gt;<br>
&gt;&gt; Thanks &amp; Regards,<br>
&gt;&gt; Prabath<br>
&gt;&gt;<br>
&gt;&gt; Mobile : <a href=3D"tel:%2B94%2071%20809%206732" =
value=3D"+94718096732">+94 71 809 6732</a><br>
&gt;&gt;<br>
&gt;&gt; <a href=3D"http://blog.facilelogin.com/" =
target=3D"_blank">http://blog.facilelogin.com</a><br>
&gt;&gt; <a href=3D"http://RampartFAQ.com/" =
target=3D"_blank">http://RampartFAQ.com</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; scim mailing list<br>
&gt;&gt; <a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/scim" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/scim</a><br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; scim mailing list<br>
&gt; <a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/scim" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/scim</a><br>
<br>
_______________________________________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/scim</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- =
<br>Thanks &amp; Regards,<br>Prabath<div><br></div><div>Mobile : +94 71 =
809 6732&nbsp;<br><br><a href=3D"http://blog.facilelogin.com/" =
target=3D"_blank">http://blog.facilelogin.com</a><br>
<a href=3D"http://RampartFAQ.com/" =
target=3D"_blank">http://RampartFAQ.com</a></div>
</div>
_______________________________________________<br>scim mailing =
list<br><a =
href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>https://www.ietf.org/ma=
ilman/listinfo/scim<br></blockquote></div><br></div></body></html>=

--Apple-Mail=_119ED0E8-3C27-4AC8-9956-CC527C9CFC61--

From likepeng@huawei.com  Tue Feb  5 22:12:23 2013
Return-Path: <likepeng@huawei.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D9F021F84C0 for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 22:12:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QYayVM3bzqdH for <scim@ietfa.amsl.com>; Tue,  5 Feb 2013 22:12:22 -0800 (PST)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id AC73E21F8414 for <scim@ietf.org>; Tue,  5 Feb 2013 22:12:18 -0800 (PST)
Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id APL94788; Wed, 06 Feb 2013 06:12:15 +0000 (GMT)
Received: from LHREML403-HUB.china.huawei.com (10.201.5.217) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.7; Wed, 6 Feb 2013 06:11:15 +0000
Received: from SZXEML420-HUB.china.huawei.com (10.82.67.159) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.1.323.7; Wed, 6 Feb 2013 06:12:14 +0000
Received: from SZXEML525-MBX.china.huawei.com ([169.254.1.166]) by szxeml420-hub.china.huawei.com ([10.82.67.159]) with mapi id 14.01.0323.007; Wed, 6 Feb 2013 14:12:10 +0800
From: Likepeng <likepeng@huawei.com>
To: scim WG <scim@ietf.org>
Thread-Topic: New Version Notification for draft-zeltsan-scim-use-cases-01.txt
Thread-Index: AQHOBC2j3HskFaJWDUmfGnHrYTSn25hsVQlw
Date: Wed, 6 Feb 2013 06:12:09 +0000
Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F21EDB8A52@szxeml525-mbx.china.huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.70.110.61]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Subject: [scim] Fw: New Version Notification for draft-zeltsan-scim-use-cases-01.txt
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Feb 2013 06:12:23 -0000
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=

From kelly.grizzle@sailpoint.com  Wed Feb  6 09:15:21 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAA0321F88E6 for <scim@ietfa.amsl.com>; Wed,  6 Feb 2013 09:15:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xl3U+rXDURwm for <scim@ietfa.amsl.com>; Wed,  6 Feb 2013 09:15:11 -0800 (PST)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe001.messaging.microsoft.com [216.32.181.181]) by ietfa.amsl.com (Postfix) with ESMTP id 210BA21F8633 for <scim@ietf.org>; Wed,  6 Feb 2013 09:15:10 -0800 (PST)
Received: from mail35-ch1-R.bigfish.com (10.43.68.228) by CH1EHSOBE002.bigfish.com (10.43.70.52) with Microsoft SMTP Server id 14.1.225.23; Wed, 6 Feb 2013 17:15:10 +0000
Received: from mail35-ch1 (localhost [127.0.0.1])	by mail35-ch1-R.bigfish.com (Postfix) with ESMTP id 05055E026F; Wed,  6 Feb 2013 17:15:10 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT003.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -22
X-BigFish: PS-22(zz9371I542Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL8275dhz31h2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h1155h)
Received-SPF: softfail (mail35-ch1: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT003.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail35-ch1 (localhost.localdomain [127.0.0.1]) by mail35-ch1 (MessageSwitch) id 1360170907596950_25941; Wed,  6 Feb 2013 17:15:07 +0000 (UTC)
Received: from CH1EHSMHS015.bigfish.com (snatpool2.int.messaging.microsoft.com [10.43.68.236])	by mail35-ch1.bigfish.com (Postfix) with ESMTP id 8E93316040B;	Wed,  6 Feb 2013 17:15:07 +0000 (UTC)
Received: from BLUPRD0412HT003.namprd04.prod.outlook.com (132.245.1.133) by CH1EHSMHS015.bigfish.com (10.43.70.15) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 6 Feb 2013 17:15:05 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.70]) by BLUPRD0412HT003.namprd04.prod.outlook.com ([10.255.214.164]) with mapi id 14.16.0263.000; Wed, 6 Feb 2013 17:15:05 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Tatsuo Kudo <tatsuo.kudo@gmail.com>, "scim@ietf.org" <scim@ietf.org>
Thread-Topic: [scim] Phonetic representation of values
Thread-Index: AQHN/tfEqL6PfQoldEiGGFO7zB2+t5htF98A
Date: Wed, 6 Feb 2013 17:15:04 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AC0862@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <5108FB25.7000700@gmail.com>
In-Reply-To: <5108FB25.7000700@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 1E53078D003C2C1E5308DA
x-originating-ip: [72.182.10.254]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Subject: Re: [scim] Phonetic representation of values
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Feb 2013 17:15:21 -0000

I would recommend going  with the last example (using locale as a sub-attri=
bute).  This would allow multiple phonetic representations for different lo=
cales to get grouped into a single multi-valued attribute.  Something like:

  "phoneticName": [
    { "value": "...", "locale": "ja-kana-JP" },
    { "value": "...", "locale": "<another locale>" }
  ]

--Kelly

-----Original Message-----
From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Tat=
suo Kudo
Sent: Wednesday, January 30, 2013 4:51 AM
To: scim@ietf.org
Subject: [scim] Phonetic representation of values

A couple of SaaS providers / ASPs in Japan are asking how to specify phonet=
ic representation in SCIM.  Has anyone done that?  I suppose the following =
example but don't know which is better in practice.

 - "value;lang-ja;phonetic":"<phonetic representation in Japanese>"
 - "value#ja-kana-JP":"..."
 - "value#ja_kana_JP":"..."
 - { "value":"...","locale":"ja-kana-JP" }

Any comments appreciated.
Tatsuo.
_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim



From leifj@sunet.se  Fri Feb  8 05:47:48 2013
Return-Path: <leifj@sunet.se>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98CA921F8518 for <scim@ietfa.amsl.com>; Fri,  8 Feb 2013 05:47:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vZOe+ymc41Ar for <scim@ietfa.amsl.com>; Fri,  8 Feb 2013 05:47:48 -0800 (PST)
Received: from backup-server.nordu.net (backup-server.nordu.net [IPv6:2001:948:4:1::66]) by ietfa.amsl.com (Postfix) with ESMTP id C476F21F84E4 for <scim@ietf.org>; Fri,  8 Feb 2013 05:47:47 -0800 (PST)
Received: from [10.0.0.244] (tb62-102-145-131.cust.teknikbyran.com [62.102.145.131]) (authenticated bits=0) by backup-server.nordu.net (8.14.5/8.14.3) with ESMTP id r18DlhEv013803 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <scim@ietf.org>; Fri, 8 Feb 2013 14:47:46 +0100 (CET)
Message-ID: <511501FF.80809@sunet.se>
Date: Fri, 08 Feb 2013 14:47:43 +0100
From: Leif Johansson <leifj@sunet.se>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130106 Thunderbird/17.0.2
MIME-Version: 1.0
To: scim WG <scim@ietf.org>
References: <20130207220011.815.18142.idtracker@ietfa.amsl.com>
In-Reply-To: <20130207220011.815.18142.idtracker@ietfa.amsl.com>
X-Forwarded-Message-Id: <20130207220011.815.18142.idtracker@ietfa.amsl.com>
Content-Type: multipart/alternative; boundary="------------010100040401030509080204"
Subject: [scim] Fwd: scim - Requested session has been scheduled for IETF 86
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Feb 2013 13:47:48 -0000

This is a multi-part message in MIME format.
--------------010100040401030509080204
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit


Folks,

We have a session in Orlando.

Lets make sure we have plenty of progress!


-------- Original Message --------
Subject: 	scim - Requested session has been scheduled for IETF 86
Date: 	Thu, 07 Feb 2013 14:00:11 -0800
From: 	"IETF Secretariat" <agenda@ietf.org>
To: 	leifj@sunet.se
CC: 	scim-ads@tools.ietf.org, moransar@cisco.com, leifj@sunet.se,
wlo@amsl.com



Dear Leif Johansson,

The session(s) that you have requested have been scheduled.
Below is the scheduled session information followed by
the original request. 

scim Session 1 (2:00:00)
    Friday, Afternoon Session I 1120-1220
    Room Name: Caribbean 5
    ---------------------------------------------
    


Request Information:


---------------------------------------------------------
Working Group Name: 
Area Name: 
Session Requester: 

Number of Sessions: 1
Length of Session(s):  2 Hours
Number of Attendees: 100
Conflicts to Avoid: 
 First Priority: abfab websec urnbis saag oauth hybi httpbis core appsawg apparea kitten
 Second Priority: krb-wg sidr



Special Requests:
  Please also avoid App and Sec Area BoFs.
---------------------------------------------------------




--------------010100040401030509080204
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    Folks,<br>
    <br>
    We have a session in Orlando. <br>
    <br>
    Lets make sure we have plenty of progress!<br>
    <div class="moz-forward-container"><br>
      <br>
      -------- Original Message --------
      <table class="moz-email-headers-table" border="0" cellpadding="0"
        cellspacing="0">
        <tbody>
          <tr>
            <th nowrap="nowrap" valign="BASELINE" align="RIGHT">Subject:
            </th>
            <td>scim - Requested session has been scheduled for IETF 86</td>
          </tr>
          <tr>
            <th nowrap="nowrap" valign="BASELINE" align="RIGHT">Date: </th>
            <td>Thu, 07 Feb 2013 14:00:11 -0800</td>
          </tr>
          <tr>
            <th nowrap="nowrap" valign="BASELINE" align="RIGHT">From: </th>
            <td>"IETF Secretariat" <a class="moz-txt-link-rfc2396E" href="mailto:agenda@ietf.org">&lt;agenda@ietf.org&gt;</a></td>
          </tr>
          <tr>
            <th nowrap="nowrap" valign="BASELINE" align="RIGHT">To: </th>
            <td><a class="moz-txt-link-abbreviated" href="mailto:leifj@sunet.se">leifj@sunet.se</a></td>
          </tr>
          <tr>
            <th nowrap="nowrap" valign="BASELINE" align="RIGHT">CC: </th>
            <td><a class="moz-txt-link-abbreviated" href="mailto:scim-ads@tools.ietf.org">scim-ads@tools.ietf.org</a>, <a class="moz-txt-link-abbreviated" href="mailto:moransar@cisco.com">moransar@cisco.com</a>,
              <a class="moz-txt-link-abbreviated" href="mailto:leifj@sunet.se">leifj@sunet.se</a>, <a class="moz-txt-link-abbreviated" href="mailto:wlo@amsl.com">wlo@amsl.com</a></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      <pre>Dear Leif Johansson,

The session(s) that you have requested have been scheduled.
Below is the scheduled session information followed by
the original request. 

scim Session 1 (2:00:00)
    Friday, Afternoon Session I 1120-1220
    Room Name: Caribbean 5
    ---------------------------------------------
    


Request Information:


---------------------------------------------------------
Working Group Name: 
Area Name: 
Session Requester: 

Number of Sessions: 1
Length of Session(s):  2 Hours
Number of Attendees: 100
Conflicts to Avoid: 
 First Priority: abfab websec urnbis saag oauth hybi httpbis core appsawg apparea kitten
 Second Priority: krb-wg sidr



Special Requests:
  Please also avoid App and Sec Area BoFs.
---------------------------------------------------------

</pre>
      <br>
    </div>
    <br>
  </body>
</html>

--------------010100040401030509080204--

From randomshelley@gmail.com  Mon Feb 11 09:34:23 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF14821F8938 for <scim@ietfa.amsl.com>; Mon, 11 Feb 2013 09:34:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kfEaSIzwGk6X for <scim@ietfa.amsl.com>; Mon, 11 Feb 2013 09:34:23 -0800 (PST)
Received: from mail-ia0-x232.google.com (mail-ia0-x232.google.com [IPv6:2607:f8b0:4001:c02::232]) by ietfa.amsl.com (Postfix) with ESMTP id 1A19521F8831 for <scim@ietf.org>; Mon, 11 Feb 2013 09:34:23 -0800 (PST)
Received: by mail-ia0-f178.google.com with SMTP id y26so6531175iab.37 for <scim@ietf.org>; Mon, 11 Feb 2013 09:34:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=/Kkgr1/bwmH8Zm6DyqUOC/wc/KXzdC0z9WfgGyL/tzY=; b=reHFtRvZkf/hYq/KEAb2NAF8GMm4nN1tD7dDW0b6bmVVSCRrlxCtpK7bL8etYo7+CU NSFhsvGnPSgKHpvDaECmoHBlwQelvCNmZhY4TQKNriIZvyZOFA96hwFNSeSkO3rvcH5s 1k7HuifPlNyQ+lokgpqXnBkyWMoN20JKhdfd65QP9exBDabz/iC3ze5mfADDciGZLSmQ kyzTm9vOy6Zy56NUwfek9vP2XZiCXeMAarbL4DDcBqrHbVxSiz+vSmyjp4AO0r6ooKI5 dQrEJKTHkK0f+Dio3fn4u/rr36RV0Vi68KfHEDnN3H2r1vqTbtZ1oSlM4zpZsW+l5v22 a/sw==
MIME-Version: 1.0
X-Received: by 10.50.158.130 with SMTP id wu2mr13032173igb.106.1360604062525;  Mon, 11 Feb 2013 09:34:22 -0800 (PST)
Received: by 10.64.69.10 with HTTP; Mon, 11 Feb 2013 09:34:22 -0800 (PST)
Date: Mon, 11 Feb 2013 11:34:22 -0600
Message-ID: <CAGUsYPw6mY2uAA9CnUQDZ6O1V7c=hcsAfs4G+qW7eujO4jc7EQ@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: scim@ietf.org
Content-Type: multipart/alternative; boundary=14dae9340989d3aad204d5765111
Subject: [scim] Addresses Value Attribute
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Feb 2013 17:34:23 -0000

--14dae9340989d3aad204d5765111
Content-Type: text/plain; charset=ISO-8859-1

There seems to be a slight ambiguity in the definition of the addresses
attribute as to whether it has a "value" sub-attribute.

The "addresses" attribute defined in the core schema (6.2) indicates that
it is a "multi-valued attribute" and that its "value attribute is a complex
type with the following sub-attributes". As such, it would seem that the
appropriate representation would be something similar to the following:

  "addresses": [
    {
      "type": "work",
      "primary": true,
      "value":
        {
          "streetAddress": "100 Universal City Plaza",
          "locality": "Hollywood",
          "region": "CA",
          "postalCode": "91608",
          "country": "USA",
          "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA"
       }
    },
    {
      "type": "home",
      "value":
        {
          "streetAddress": "456 Hollywood Blvd",
          "locality": "Hollywood",
          "region": "CA",
          "postalCode": "91608",
          "country": "USA",
          "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA"
        }
    }
  ],

However, the protocol specification indicates "Attributes that do not have
a value Sub-Attribute; e.g., addresses" (3.3.2), implying that "addresses"
does NOT have a "value" attribute. Further, the examples throughout the
core specification (11.2, 11.3, 11.6) and protocol spec (3.3.2) use the
following representation, which imply that there is no "value" attribute:

  "addresses": [
    {
      "type": "work",
      "streetAddress": "100 Universal City Plaza",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA",
      "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA",
      "primary": true
    },
    {
      "type": "home",
      "streetAddress": "456 Hollywood Blvd",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA",
      "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA"
    }
  ]

Is the latter form the correct representation? If so, the "addresses"
attribute description should probably be updated to remove the reference to
its "value attribute" and perhaps clarify that it has no "value" attribute.

--14dae9340989d3aad204d5765111
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

There seems to be a slight ambiguity in the definition of the addresses att=
ribute as to whether it has a &quot;value&quot; sub-attribute.<br><br>The &=
quot;addresses&quot; attribute defined in the core schema (6.2) indicates t=
hat it is a &quot;multi-valued attribute&quot; and that its &quot;value att=
ribute is a complex type with the following sub-attributes&quot;. As such, =
it would seem that the appropriate representation would be something simila=
r to the following:<br>
<br>=A0 &quot;addresses&quot;: [<br>=A0=A0=A0 {<br>=A0=A0=A0=A0=A0 &quot;ty=
pe&quot;: &quot;work&quot;,<br>=A0=A0=A0=A0=A0 &quot;primary&quot;: true,<b=
r>=A0=A0=A0=A0=A0 &quot;value&quot;: <br>=A0=A0=A0=A0=A0=A0=A0 {<br>=A0=A0=
=A0=A0=A0=A0=A0=A0=A0 &quot;streetAddress&quot;: &quot;100 Universal City P=
laza&quot;,<br>
=A0=A0=A0=A0=A0=A0=A0=A0=A0 &quot;locality&quot;: &quot;Hollywood&quot;,<br=
>=A0=A0=A0=A0=A0=A0=A0=A0=A0 &quot;region&quot;: &quot;CA&quot;,<br>=A0=A0=
=A0=A0=A0=A0=A0=A0=A0 &quot;postalCode&quot;: &quot;91608&quot;,<br>=A0=A0=
=A0=A0=A0=A0=A0=A0=A0 &quot;country&quot;: &quot;USA&quot;,<br>=A0=A0=A0=A0=
=A0=A0=A0=A0=A0 &quot;formatted&quot;: &quot;100 Universal City Plaza\nHoll=
ywood, CA 91608 USA&quot;<br>
=A0=A0=A0=A0=A0=A0 }<br>=A0=A0=A0 },<br>=A0=A0=A0 {<br>=A0=A0=A0=A0=A0 &quo=
t;type&quot;: &quot;home&quot;,<br>=A0=A0=A0=A0=A0 &quot;value&quot;: <br>=
=A0=A0=A0=A0=A0=A0=A0 {<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0 &quot;streetAddress&=
quot;: &quot;456 Hollywood Blvd&quot;,<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0 &quot=
;locality&quot;: &quot;Hollywood&quot;,<br>
=A0=A0=A0=A0=A0=A0=A0=A0=A0 &quot;region&quot;: &quot;CA&quot;,<br>=A0=A0=
=A0=A0=A0=A0=A0=A0=A0 &quot;postalCode&quot;: &quot;91608&quot;,<br>=A0=A0=
=A0=A0=A0=A0=A0=A0=A0 &quot;country&quot;: &quot;USA&quot;,<br>=A0=A0=A0=A0=
=A0=A0=A0=A0=A0 &quot;formatted&quot;: &quot;456 Hollywood Blvd\nHollywood,=
 CA 91608 USA&quot;<br>
=A0=A0=A0=A0=A0=A0=A0 }<br>=A0=A0=A0 }<br>=A0 ],<br><br>However, the protoc=
ol specification indicates &quot;Attributes that do not have a value Sub-At=
tribute; e.g., addresses&quot; (3.3.2), implying that &quot;addresses&quot;=
 does NOT have a &quot;value&quot; attribute. Further, the examples through=
out the core specification (11.2, 11.3, 11.6) and protocol spec (3.3.2) use=
 the following representation, which imply that there is no &quot;value&quo=
t; attribute:<br>
<br>=A0 &quot;addresses&quot;: [<br>=A0=A0=A0 {<br>=A0=A0=A0=A0=A0 &quot;ty=
pe&quot;: &quot;work&quot;,<br>=A0=A0=A0=A0=A0 &quot;streetAddress&quot;: &=
quot;100 Universal City Plaza&quot;,<br>=A0=A0=A0=A0=A0 &quot;locality&quot=
;: &quot;Hollywood&quot;,<br>=A0=A0=A0=A0=A0 &quot;region&quot;: &quot;CA&q=
uot;,<br>
=A0=A0=A0=A0=A0 &quot;postalCode&quot;: &quot;91608&quot;,<br>=A0=A0=A0=A0=
=A0 &quot;country&quot;: &quot;USA&quot;,<br>=A0=A0=A0=A0=A0 &quot;formatte=
d&quot;: &quot;100 Universal City Plaza\nHollywood, CA 91608 USA&quot;,<br>=
=A0=A0=A0=A0=A0 &quot;primary&quot;: true<br>
=A0=A0=A0 },<br>=A0=A0=A0 {<br>=A0=A0=A0=A0=A0 &quot;type&quot;: &quot;home=
&quot;,<br>=A0=A0=A0=A0=A0 &quot;streetAddress&quot;: &quot;456 Hollywood B=
lvd&quot;,<br>=A0=A0=A0=A0=A0 &quot;locality&quot;: &quot;Hollywood&quot;,<=
br>=A0=A0=A0=A0=A0 &quot;region&quot;: &quot;CA&quot;,<br>
=A0=A0=A0=A0=A0 &quot;postalCode&quot;: &quot;91608&quot;,<br>=A0=A0=A0=A0=
=A0 &quot;country&quot;: &quot;USA&quot;,<br>=A0=A0=A0=A0=A0 &quot;formatte=
d&quot;: &quot;456 Hollywood Blvd\nHollywood, CA 91608 USA&quot;<br>=A0=A0=
=A0 }<br>=A0 ]<br><br>Is the latter form the correct representation? If so,=
 the &quot;addresses&quot; attribute description should probably be updated=
 to remove the reference to its &quot;value attribute&quot; and perhaps cla=
rify that it has no &quot;value&quot; attribute.

--14dae9340989d3aad204d5765111--

From randomshelley@gmail.com  Mon Feb 11 09:35:31 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AA6421F8938 for <scim@ietfa.amsl.com>; Mon, 11 Feb 2013 09:35:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H7f9JdlqUmn3 for <scim@ietfa.amsl.com>; Mon, 11 Feb 2013 09:35:31 -0800 (PST)
Received: from mail-ie0-x235.google.com (ie-in-x0235.1e100.net [IPv6:2607:f8b0:4001:c03::235]) by ietfa.amsl.com (Postfix) with ESMTP id EB83C21F8831 for <scim@ietf.org>; Mon, 11 Feb 2013 09:35:30 -0800 (PST)
Received: by mail-ie0-f181.google.com with SMTP id 17so8012395iea.12 for <scim@ietf.org>; Mon, 11 Feb 2013 09:35:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=9TNQ07aIJDgscKYW7JbJAQPUMLBmSzvJu3UVurzKt/I=; b=H8SMD1JF0wGcHBEs+1JKiN6yIN4+/AuBRWF9Bj0pvuEw68v62pFDX1Lok65hsbdten LeP6LKILA0o8Bgj9CyMvft1NsDo7lh9BK9oCelIbLy9b0eK35S+T/MbU38kFxdGZuE5y GBDF4i2xFDMt3iPDH4oJQPY+ZmrloOC9eWA/PzYZn1QTSYDel/uzst7Sb3dVrZtl9sPl C+EYzLrVYcOue2AnULFlBDuvvAzpIi9vR0YoDahXy0vobLyyKn1IBEHyTad9jgwZRXpJ Qwj7IvLIXYQFGhokpXEHN9iDaUwGPIPQBZaI325HwDJiT3OXgMxz25ZFLEvVjOzYX4HJ FqMQ==
MIME-Version: 1.0
X-Received: by 10.43.9.137 with SMTP id ow9mr3231324icb.32.1360604130458; Mon, 11 Feb 2013 09:35:30 -0800 (PST)
Received: by 10.64.69.10 with HTTP; Mon, 11 Feb 2013 09:35:30 -0800 (PST)
In-Reply-To: <56C3C758F9D6534CA3778EAA1E0C343753AB2F38@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPz7_9Tat93aC2t=YAQcHG6dmboYDYij_8sRpKA6CZoWEA@mail.gmail.com> <56C3C758F9D6534CA3778EAA1E0C343753AB2F38@BLUPRD0412MB643.namprd04.prod.outlook.com>
Date: Mon, 11 Feb 2013 11:35:30 -0600
Message-ID: <CAGUsYPwUt997zV9sxC4p93Jz=9j+bWeqygyMSkssM1gMZfxhpQ@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: Kelly Grizzle <kelly.grizzle@sailpoint.com>
Content-Type: multipart/alternative; boundary=bcaec5161fcde03dc704d5765546
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Groups Member Type
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Feb 2013 17:35:31 -0000

--bcaec5161fcde03dc704d5765546
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

+1 to mark it as "immutable".

On Mon, Feb 4, 2013 at 8:08 AM, Kelly Grizzle
<kelly.grizzle@sailpoint.com>wrote:

>  Good point.  It seems like this should say =93immutable=94 rather than
> =93read-only=94, since it can be set initially but not updated.  Thoughts=
 from
> anyone else?  If this seems reasonable I=92ll open an issue to get this f=
ixed.
> ****
>
> ** **
>
> --Kelly****
>
> ** **
>
> *From:* scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] *On Behalf
> Of *Shelley
> *Sent:* Friday, February 01, 2013 1:37 PM
> *To:* scim@ietf.org
> *Subject:* [scim] Groups Member Type****
>
> ** **
>
> As indicated in Section 8, the canonical types for Group members are
> READ-ONLY. As such, how can consumers provide the type (i.e. "User" or
> "Group")? Is it implied that IDs are unique across both users and groups =
in
> order for service providers to fulfill this requirement?****
>

--bcaec5161fcde03dc704d5765546
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

+1 to mark it as &quot;immutable&quot;.<br><br><div class=3D"gmail_quote">O=
n Mon, Feb 4, 2013 at 8:08 AM, Kelly Grizzle <span dir=3D"ltr">&lt;<a href=
=3D"mailto:kelly.grizzle@sailpoint.com" target=3D"_blank">kelly.grizzle@sai=
lpoint.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">





<div link=3D"blue" vlink=3D"purple" lang=3D"EN-US">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">Good point.=A0 It seems l=
ike this should say =93immutable=94 rather than =93read-only=94, since it c=
an be set initially but not updated.=A0 Thoughts from anyone else?=A0
 If this seems reasonable I=92ll open an issue to get this fixed.<u></u><u>=
</u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">--Kelly<u></u><u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> <a href=
=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@ietf.org</=
a> [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-=
bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Friday, February 01, 2013 1:37 PM<br>
<b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> [scim] Groups Member Type<u></u><u></u></span></p><div clas=
s=3D"im">
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal">As indicated in Section 8, the canonical types for G=
roup members are READ-ONLY. As such, how can consumers provide the type (i.=
e. &quot;User&quot; or &quot;Group&quot;)? Is it implied that IDs are uniqu=
e across both users and groups in order for service providers
 to fulfill this requirement?<u></u><u></u></p>
</div></div>
</div>

</blockquote></div><br>

--bcaec5161fcde03dc704d5765546--

From kelly.grizzle@sailpoint.com  Mon Feb 11 14:11:45 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95CCA21F8AA6 for <scim@ietfa.amsl.com>; Mon, 11 Feb 2013 14:11:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.298
X-Spam-Level: 
X-Spam-Status: No, score=-5.298 tagged_above=-999 required=5 tests=[AWL=1.300,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I+t-N+djoxFc for <scim@ietfa.amsl.com>; Mon, 11 Feb 2013 14:11:44 -0800 (PST)
Received: from co9outboundpool.messaging.microsoft.com (co9ehsobe002.messaging.microsoft.com [207.46.163.25]) by ietfa.amsl.com (Postfix) with ESMTP id 63F8721F8A9B for <scim@ietf.org>; Mon, 11 Feb 2013 14:11:43 -0800 (PST)
Received: from mail6-co9-R.bigfish.com (10.236.132.242) by CO9EHSOBE025.bigfish.com (10.236.130.88) with Microsoft SMTP Server id 14.1.225.23; Mon, 11 Feb 2013 22:11:42 +0000
Received: from mail6-co9 (localhost [127.0.0.1])	by mail6-co9-R.bigfish.com (Postfix) with ESMTP id 552C14C0245; Mon, 11 Feb 2013 22:05:21 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT001.namprd04.prod.outlook.com; RD:error; EFVD:FOP
X-SpamScore: -22
X-BigFish: PS-22(zz98dI9371Ic85fhzz1f42h1ee6h1de0h1202h1e76h1d1ah1d2ahz8dhz1033IL17326ah8275dh18c673h8275bhz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1155h)
Received-SPF: softfail (mail6-co9: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT001.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail6-co9 (localhost.localdomain [127.0.0.1]) by mail6-co9 (MessageSwitch) id 1360620259672133_18481; Mon, 11 Feb 2013 22:04:19 +0000 (UTC)
Received: from CO9EHSMHS017.bigfish.com (unknown [10.236.132.235])	by mail6-co9.bigfish.com (Postfix) with ESMTP id 7E887A0111; Mon, 11 Feb 2013 22:04:19 +0000 (UTC)
Received: from BLUPRD0412HT001.namprd04.prod.outlook.com (132.245.1.133) by CO9EHSMHS017.bigfish.com (10.236.130.27) with Microsoft SMTP Server (TLS) id 14.1.225.23; Mon, 11 Feb 2013 22:02:25 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.70]) by BLUPRD0412HT001.namprd04.prod.outlook.com ([10.255.214.162]) with mapi id 14.16.0263.000; Mon, 11 Feb 2013 22:02:21 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: Shelley <randomshelley@gmail.com>
Thread-Topic: [scim] Groups Member Type
Thread-Index: AQHOALOOeHp6hjJutkGc7C2Tyxq6nZhpv6cAgAs7UQCAAEp64A==
Date: Mon, 11 Feb 2013 22:02:21 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AC4630@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPz7_9Tat93aC2t=YAQcHG6dmboYDYij_8sRpKA6CZoWEA@mail.gmail.com> <56C3C758F9D6534CA3778EAA1E0C343753AB2F38@BLUPRD0412MB643.namprd04.prod.outlook.com> <CAGUsYPwUt997zV9sxC4p93Jz=9j+bWeqygyMSkssM1gMZfxhpQ@mail.gmail.com>
In-Reply-To: <CAGUsYPwUt997zV9sxC4p93Jz=9j+bWeqygyMSkssM1gMZfxhpQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 3919DC46003C863919DD93
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AC4630BLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Groups Member Type
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Feb 2013 22:11:45 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C343753AC4630BLUPRD0412MB643_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I opened ticket #35 to change this.

http://trac.tools.ietf.org/wg/scim/trac/ticket/35

--Kelly

From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of She=
lley
Sent: Monday, February 11, 2013 11:36 AM
To: Kelly Grizzle
Cc: scim@ietf.org
Subject: Re: [scim] Groups Member Type

+1 to mark it as "immutable".
On Mon, Feb 4, 2013 at 8:08 AM, Kelly Grizzle <kelly.grizzle@sailpoint.com<=
mailto:kelly.grizzle@sailpoint.com>> wrote:
Good point.  It seems like this should say "immutable" rather than "read-on=
ly", since it can be set initially but not updated.  Thoughts from anyone e=
lse?  If this seems reasonable I'll open an issue to get this fixed.

--Kelly

From: scim-bounces@ietf.org<mailto:scim-bounces@ietf.org> [mailto:scim-boun=
ces@ietf.org<mailto:scim-bounces@ietf.org>] On Behalf Of Shelley
Sent: Friday, February 01, 2013 1:37 PM
To: scim@ietf.org<mailto:scim@ietf.org>
Subject: [scim] Groups Member Type

As indicated in Section 8, the canonical types for Group members are READ-O=
NLY. As such, how can consumers provide the type (i.e. "User" or "Group")? =
Is it implied that IDs are unique across both users and groups in order for=
 service providers to fulfill this requirement?


--_000_56C3C758F9D6534CA3778EAA1E0C343753AC4630BLUPRD0412MB643_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">I opened ticket #35 to ch=
ange this.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><a href=3D"http://trac.to=
ols.ietf.org/wg/scim/trac/ticket/35">http://trac.tools.ietf.org/wg/scim/tra=
c/ticket/35</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> scim-bou=
nces@ietf.org [mailto:scim-bounces@ietf.org]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Monday, February 11, 2013 11:36 AM<br>
<b>To:</b> Kelly Grizzle<br>
<b>Cc:</b> scim@ietf.org<br>
<b>Subject:</b> Re: [scim] Groups Member Type<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">&#43;1 to mark it as =
&quot;immutable&quot;.<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">On Mon, Feb 4, 2013 at 8:08 AM, Kelly Grizzle &lt;<a=
 href=3D"mailto:kelly.grizzle@sailpoint.com" target=3D"_blank">kelly.grizzl=
e@sailpoint.com</a>&gt; wrote:<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">Good point.&nbsp; It seems like this sh=
ould say &#8220;immutable&#8221; rather than &#8220;read-only&#8221;, since=
 it can be set
 initially but not updated.&nbsp; Thoughts from anyone else?&nbsp; If this =
seems reasonable I&#8217;ll open an issue to get this fixed.</span><o:p></o=
:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">--Kelly</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><b><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,=
&quot;sans-serif&quot;">From:</span></b><span style=3D"font-size:10.0pt;fon=
t-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;">
<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@iet=
f.org</a> [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank=
">scim-bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Friday, February 01, 2013 1:37 PM<br>
<b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> [scim] Groups Member Type</span><o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">As indicated in Section 8, the canonical types for Group members a=
re READ-ONLY. As such, how can consumers provide the type (i.e. &quot;User&=
quot; or &quot;Group&quot;)? Is it implied that IDs are
 unique across both users and groups in order for service providers to fulf=
ill this requirement?<o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AC4630BLUPRD0412MB643_--

From kelly.grizzle@sailpoint.com  Thu Feb 14 07:16:23 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD4D221F886F for <scim@ietfa.amsl.com>; Thu, 14 Feb 2013 07:16:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mnzXip1vzXct for <scim@ietfa.amsl.com>; Thu, 14 Feb 2013 07:16:23 -0800 (PST)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe002.messaging.microsoft.com [216.32.181.182]) by ietfa.amsl.com (Postfix) with ESMTP id 69AD421F868D for <scim@ietf.org>; Thu, 14 Feb 2013 07:16:22 -0800 (PST)
Received: from mail141-ch1-R.bigfish.com (10.43.68.232) by CH1EHSOBE002.bigfish.com (10.43.70.52) with Microsoft SMTP Server id 14.1.225.23; Thu, 14 Feb 2013 15:16:21 +0000
Received: from mail141-ch1 (localhost [127.0.0.1])	by mail141-ch1-R.bigfish.com (Postfix) with ESMTP id 95E31400245	for <scim@ietf.org>; Thu, 14 Feb 2013 15:16:21 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT001.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -50
X-BigFish: PS-50(z21aILzc85fh8a5Sd7ddizz1f42h1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL17326ah8275bh8275dh18c673hz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh34h1155h)
Received-SPF: softfail (mail141-ch1: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT001.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail141-ch1 (localhost.localdomain [127.0.0.1]) by mail141-ch1 (MessageSwitch) id 1360854979372200_16151; Thu, 14 Feb 2013 15:16:19 +0000 (UTC)
Received: from CH1EHSMHS001.bigfish.com (snatpool3.int.messaging.microsoft.com [10.43.68.229])	by mail141-ch1.bigfish.com (Postfix) with ESMTP id 556771A0048	for <scim@ietf.org>; Thu, 14 Feb 2013 15:16:19 +0000 (UTC)
Received: from BLUPRD0412HT001.namprd04.prod.outlook.com (132.245.1.133) by CH1EHSMHS001.bigfish.com (10.43.70.1) with Microsoft SMTP Server (TLS) id 14.1.225.23; Thu, 14 Feb 2013 15:16:18 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.70]) by BLUPRD0412HT001.namprd04.prod.outlook.com ([10.255.214.162]) with mapi id 14.16.0263.000; Thu, 14 Feb 2013 15:16:17 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: "scim@ietf.org" <scim@ietf.org>
Thread-Topic: Reference data type - issue #33
Thread-Index: Ac4KxLeeCq718040Sy6SwfY3aL2ymw==
Date: Thu, 14 Feb 2013 15:16:17 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C343753AC6803@BLUPRD0412MB643.namprd04.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-vipre-scanned: 05780115003CB605780262
x-originating-ip: [72.182.10.254]
Content-Type: multipart/mixed; boundary="_006_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Subject: [scim] Reference data type - issue #33
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Feb 2013 15:16:23 -0000

--_006_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_
Content-Type: multipart/alternative;
	boundary="_000_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_"

--_000_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Issue 33 now contains some proposed changes to formalize support for refere=
nces in SCIM.  Full information is available in the issue tracker here: htt=
p://trac.tools.ietf.org/wg/scim/trac/ticket/33.  A brief description of the=
 changes:


1)      A new "Reference" data type was added in section 3.1.7 of the core =
schema document. This defines a reference to another SCIM object.

2)      The User, Group, and Enterprise User schemas were modified to make =
use of the reference attribute. For User, this is used in the "groups" attr=
ibute. For Group, this is used in the "members" attribute. For Enterprise U=
ser, this is used in the "manager" attribute.

3)      A new "referenceTypes" sub-attribute was added in section 10 of the=
 core schema document. This applies to the "attributes" and "subAttributes"=
 definitions of the Schema resource, and allows the schema to specify which=
 SCIM object types can be referenced for a given attribute.

4)      The examples in the API and core schema documents were updated to u=
se references where appropriate.


Currently, the text says that references MUST be references to SCIM objects=
.  There was some discussion about extending this concept to allow referenc=
ing other external non-SCIM objects (eg - a Facebook user, etc...).  My inc=
lination is to keep references targeted towards SCIM objects.  If we see us=
e cases and decide that non-SCIM references are important, we could either =
augment the "reference" data type or add a new "URL" datatype that has meta=
data about the type of object to expect.

I've attached the diff and the full documents.  Please review these changes=
 and respond with any comments or questions.

--Kelly

--_000_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p
	{mso-style-priority:99;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:2074426672;
	mso-list-type:hybrid;
	mso-list-template-ids:-2086127362 67698705 67698713 67698715 67698703 6769=
8713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-text:"%1\)";
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Issue 33 now contains some proposed changes to forma=
lize support for references in SCIM.&nbsp; Full information is available in=
 the issue tracker here:
<a href=3D"http://trac.tools.ietf.org/wg/scim/trac/ticket/33">http://trac.t=
ools.ietf.org/wg/scim/trac/ticket/33</a>.&nbsp; A brief description of the =
changes:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">1)<span style=
=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span><![endif]>A new &quot;Reference&quot; data type was added in =
section 3.1.7 of the core schema document. This defines a reference to anot=
her SCIM object.<o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">2)<span style=
=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span><![endif]>The User, Group, and Enterprise User schemas were m=
odified to make use of the reference attribute. For User, this is used in t=
he &quot;groups&quot; attribute. For Group, this is used in the &quot;membe=
rs&quot; attribute. For Enterprise User, this is used
 in the &quot;manager&quot; attribute.<o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">3)<span style=
=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span><![endif]>A new &quot;referenceTypes&quot; sub-attribute was =
added in section 10 of the core schema document. This applies to the &quot;=
attributes&quot; and &quot;subAttributes&quot; definitions of the Schema re=
source, and allows the schema to specify which SCIM object types
 can be referenced for a given attribute.<o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">4)<span style=
=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span><![endif]>The examples in the API and core schema documents w=
ere updated to use references where appropriate.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Currently, the text says that references MUST be ref=
erences to SCIM objects.&nbsp; There was some discussion about extending th=
is concept to allow referencing other external non-SCIM objects (eg &#8211;=
 a Facebook user, etc&#8230;).&nbsp; My inclination is to
 keep references targeted towards SCIM objects.&nbsp; If we see use cases a=
nd decide that non-SCIM references are important, we could either augment t=
he &#8220;reference&#8221; data type or add a new &#8220;URL&#8221; datatyp=
e that has metadata about the type of object to expect.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">I&#8217;ve attached the diff and the full documents.=
&nbsp; Please review these changes and respond with any comments or questio=
ns.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">--Kelly<o:p></o:p></p>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_--

--_006_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_
Content-Type: application/octet-stream; name="issue33.patch"
Content-Description: issue33.patch
Content-Disposition: attachment; filename="issue33.patch"; size=52619;
	creation-date="Tue, 12 Feb 2013 22:58:59 GMT";
	modification-date="Thu, 14 Feb 2013 14:37:23 GMT"
Content-Transfer-Encoding: base64

SW5kZXg6IGRyYWZ0LWlldGYtc2NpbS1jb3JlLXNjaGVtYS0wMS54bWwNCj09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCi0t
LSBkcmFmdC1pZXRmLXNjaW0tY29yZS1zY2hlbWEtMDEueG1sCShyZXZpc2lvbiAyMDcpDQorKysg
ZHJhZnQtaWV0Zi1zY2ltLWNvcmUtc2NoZW1hLTAxLnhtbAkod29ya2luZyBjb3B5KQ0KQEAgLTIx
Nyw2ICsyMTcsMjcgQEANCiAgICAgICAgICAgPC90PgogICAgICAgICA8L3NlY3Rpb24+CiAKKyAg
ICAgICAgPHNlY3Rpb24gYW5jaG9yPSJ0eXBlLXJlZmVyZW5jZSIgdGl0bGU9IlJlZmVyZW5jZSI+
CisgICAgICAgICAgPHQ+CisgICAgICAgICAgICBBIHJlZmVyZW5jZSB0byBhIFNDSU0gUmVzb3Vy
Y2UuICBUaGUgdmFsdWUgTVVTVCBiZSB0aGUgYWJzb2x1dGUgb3IgcmVsYXRpdmUgVVJJIG9mIHRo
ZSB0YXJnZXQgUmVzb3VyY2UuCisgICAgICAgICAgICBSZWxhdGl2ZSBVUklzIHNob3VsZCBiZSBy
ZXNvbHZlZCBhcyBzcGVjaWZpZWQgaW4KKyAgICAgICAgICAgIDxlcmVmIHRhcmdldD0iaHR0cDov
L3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjMzk4NiNzZWN0aW9uLTUuMiI+c2VjdGlvbiA1LjI8L2Vy
ZWY+IG9mIFJGQyAzOTg2LgorICAgICAgICAgICAgVGhlIGJhc2UgVVJJIGZvciByZWxhdGl2ZSBV
UkkgcmVzb2x1dGlvbiBNVVNUIGluY2x1ZGUgYWxsIFVSSSBjb21wb25lbnRzIGFuZCBwYXRoIHNl
Z21lbnRzIHVwIHRvIGJ1dAorICAgICAgICAgICAgbm90IGluY2x1ZGluZyB0aGUgRW5kcG9pbnQg
VVJJOyBlLmcuLCB0aGUgYmFzZSBVUkkgZm9yIGEgcmVxdWVzdCB0bworICAgICAgICAgICAgaHR0
cHM6Ly9leGFtcGxlLmNvbS92MS9Vc2Vycy8yODE5YzIyMy03Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5
MDQ2NDYgd291bGQgYmUKKyAgICAgICAgICAgIGh0dHBzOi8vZXhhbXBsZS5jb20vdjEvIGFuZCB0
aGUgcmVsYXRpdmUgVVJJIGZvciB0aGlzIFJlc291cmNlIHdvdWxkIGJlCisgICAgICAgICAgICBV
c2Vycy8yODE5YzIyMy03Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5MDQ2NDYuCisgICAgICAgICAgPC90
PgorICAgICAgICAgIDx0PgorICAgICAgICAgICAgUGVyZm9ybWluZyBhIEdFVCBvcGVyYXRpb24g
b24gYSByZWZlcmVuY2UgVVJJIE1VU1QgcmV0dXJuIHRoZSB0YXJnZXQgUmVzb3VyY2Ugb3IgYW4g
YXBwcm9wcmlhdGUgSFRUUAorICAgICAgICAgICAgcmVzcG9uc2UgY29kZS4gIFRoZSBTZXJ2aWNl
IFByb3ZpZGVyIE1BWSBvcHRpb25hbGx5IGNob29zZSB0byBlbmZvcmNlIHJlZmVyZW50aWFsIGlu
dGVncml0eSBmb3IgcmVmZXJlbmNlcy4KKyAgICAgICAgICA8L3Q+CisgICAgICAgICAgPHQ+Cisg
ICAgICAgICAgICBCeSBjb252ZW50aW9uLCBhIHJlZmVyZW5jZSBpcyBjb21tb25seSByZXByZXNl
bnRlZCBhcyBhICIkcmVmIiBzdWItYXR0cmlidXRlIGluIGNvbXBsZXggb3IKKyAgICAgICAgICAg
IG11bHRpLXZhbHVlZCBhdHRyaWJ1dGVzLCBob3dldmVyIHRoaXMgaXMgT1BUSU9OQUwuCisgICAg
ICAgICAgPC90PgorICAgICAgICA8L3NlY3Rpb24+CisKICAgICAgICAgPHNlY3Rpb24gYW5jaG9y
PSJ0eXBlLWNvbXBsZXgiIHRpdGxlPSJDb21wbGV4Ij4KICAgICAgICAgICA8dD4KICAgICAgICAg
ICAgIEEgU2luZ3VsYXIgb3IgTXVsdGktdmFsdWVkIEF0dHJpYnV0ZSB3aG9zZSB2YWx1ZSBpcyBh
IGNvbXBvc2l0aW9uIG9mIG9uZSBvciBtb3JlIFNpbXBsZSBBdHRyaWJ1dGVzLgpAQCAtNTQxLDkg
KzU2Miw5IEBADQogICAgICAgICAgICAgICBtZW1iZXJzaGlwIGluZGljYXRlcyBVc2VyIG1lbWJl
cnNoaXAgaXMgdHJhbnNpdGl2ZSBvciBkeW5hbWljIGFuZCBpbXBsaWVzIHRoYXQgQ29uc3VtZXJz
IGNhbm5vdCBtb2RpZnkKICAgICAgICAgICAgICAgaW5kaXJlY3QgZ3JvdXAgbWVtYmVyc2hpcCB0
aHJvdWdoIHRoZSBHcm91cCByZXNvdXJjZSBidXQgTUFZIG1vZGlmeSBkaXJlY3QgZ3JvdXAgbWVt
YmVyc2hpcCB0aHJvdWdoIHRoZQogICAgICAgICAgICAgICBHcm91cCByZXNvdXJjZSB3aGljaCBN
QVkgaW5mbHVlbmNlIGluZGlyZWN0IG1lbWJlcnNoaXBzLiBJZiB0aGUgU0NJTSBTZXJ2aWNlIFBy
b3ZpZGVyIGV4cG9zZXMgYSBHcm91cAotICAgICAgICAgICAgICByZXNvdXJjZSwgdGhlIHZhbHVl
IE1VU1QgYmUgdGhlICJpZCIgYXR0cmlidXRlIG9mIHRoZSBjb3JyZXNwb25kaW5nIEdyb3VwIHJl
c291cmNlcyB0byB3aGljaCB0aGUgdXNlcgotICAgICAgICAgICAgICBiZWxvbmdzLiBTaW5jZSB0
aGlzIGF0dHJpYnV0ZSBpcyByZWFkLW9ubHksIGdyb3VwIG1lbWJlcnNoaXAgY2hhbmdlcyBNVVNU
IGJlIGFwcGxpZWQgdmlhIHRoZQotICAgICAgICAgICAgICA8eHJlZiB0YXJnZXQ9Imdyb3VwLXJl
c291cmNlIj5Hcm91cCBSZXNvdXJjZTwveHJlZj4uIFJFQUQtT05MWS4KKyAgICAgICAgICAgICAg
cmVzb3VyY2UsIHRoZSAidmFsdWUiIHN1Yi1hdHRyaWJ1dGUgTVVTVCBiZSB0aGUgImlkIiBhbmQg
dGhlICIkcmVmIiBzdWItYXR0cmlidXRlIG11c3QgYmUgdGhlIFVSSSBvZiB0aGUKKyAgICAgICAg
ICAgICAgY29ycmVzcG9uZGluZyBHcm91cCByZXNvdXJjZXMgdG8gd2hpY2ggdGhlIHVzZXIgYmVs
b25ncy4gIFNpbmNlIHRoaXMgYXR0cmlidXRlIGlzIHJlYWQtb25seSwgZ3JvdXAKKyAgICAgICAg
ICAgICAgbWVtYmVyc2hpcCBjaGFuZ2VzIE1VU1QgYmUgYXBwbGllZCB2aWEgdGhlIDx4cmVmIHRh
cmdldD0iZ3JvdXAtcmVzb3VyY2UiPkdyb3VwIFJlc291cmNlPC94cmVmPi4gUkVBRC1PTkxZLgog
ICAgICAgICAgICAgPC90PgogCiAgICAgICAgICAgICA8dCBoYW5nVGV4dD0iZW50aXRsZW1lbnRz
Ij5BIGxpc3Qgb2YgZW50aXRsZW1lbnRzIGZvciB0aGUgVXNlciB0aGF0CkBAIC02MDIsNiArNjIz
LDcgQEANCiAgICAgICAgICAgaGllcmFyY2h5IGJ5IHJlZmVyZW5jaW5nIHRoZSAiaWQiIGF0dHJp
YnV0ZSBvZiBhbm90aGVyIFVzZXIuCiAgICAgICAgICAgPGxpc3Qgc3R5bGU9ImhhbmdpbmciPgog
ICAgICAgICAgICAgICA8dCBoYW5nVGV4dD0ibWFuYWdlcklkIj5UaGUgaWQgb2YgdGhlIFNDSU0g
cmVzb3VyY2UgcmVwcmVzZW50aW5nIHRoZSBVc2VyJ3MgbWFuYWdlci4gUkVRVUlSRUQuPC90Pgor
ICAgICAgICAgICAgICA8dCBoYW5nVGV4dD0iJHJlZiI+VGhlIFVSSSBvZiB0aGUgU0NJTSByZXNv
dXJjZSByZXByZXNlbnRpbmcgdGhlIFVzZXIncyBtYW5hZ2VyLiBSRVFVSVJFRC48L3Q+CiAgICAg
ICAgICAgICAgIDx0IGhhbmdUZXh0PSJkaXNwbGF5TmFtZSI+VGhlIGRpc3BsYXlOYW1lIG9mIHRo
ZSBVc2VyJ3MgbWFuYWdlci4gIE9QVElPTkFMIGFuZCBSRUFELU9OTFkuPC90PgogICAgICAgICAg
ICAgPC9saXN0PjwvdD4KICAgICAgICAgPC9saXN0PgpAQCAtNjI2LDExICs2NDgsMTUgQEANCiAg
ICAgICA8L3Q+CiAKICAgICAgIDx0PlRoZSBmb2xsb3dpbmcgbXVsdGktdmFsdWVkIGF0dHJpYnV0
ZSBpcyBkZWZpbmVkIGluIGFkZGl0aW9uIHRvIHRoZSBjb21tb24KLSAgICAgIGF0dHJpYnV0ZXMg
ZGVmaW5lZCBpbiBTQ0lNIENvcmUgU2NoZW1hOjxsaXN0IHN0eWxlPSJoYW5naW5nIj4KLSAgICAg
ICAgICA8dCBoYW5nVGV4dD0ibWVtYmVycyI+QSBsaXN0IG9mIG1lbWJlcnMgb2YgdGhlIEdyb3Vw
LiBDYW5vbmljYWwgVHlwZXMgIlVzZXIiIGFuZCAiR3JvdXAiIGFyZSBSRUFELU9OTFkuIAotCVRo
ZSB2YWx1ZSBtdXN0IGJlIHRoZSAiaWQiIG9mIGEgU0NJTSByZXNvdXJjZSwgZWl0aGVyIGEgVXNl
ciwgb3IgYSBHcm91cC4gVGhlIGludGVudGlvbiBvZiB0aGUgR3JvdXAgdHlwZSAKLQlpcyB0byBh
bGxvdyB0aGUgU2VydmljZSBQcm92aWRlciB0byBzdXBwb3J0IG5lc3RlZCBHcm91cHMuIFNlcnZp
Y2UgUHJvdmlkZXJzIE1BWSByZXF1aXJlIENvbnN1bWVycyB0byBwcm92aWRlIAotCWEgbm9uLWVt
cHR5IG1lbWJlcnMgdmFsdWUgYmFzZWQgb24gdGhlICJyZXF1aXJlZCIgc3ViIGF0dHJpYnV0ZSBv
ZiB0aGUgIm1lbWJlcnMiIGF0dHJpYnV0ZSBpbiBHcm91cCBSZXNvdXJjZSBTY2hlbWEuCisgICAg
ICBhdHRyaWJ1dGVzIGRlZmluZWQgaW4gU0NJTSBDb3JlIFNjaGVtYToKKworICAgICAgICA8bGlz
dCBzdHlsZT0iaGFuZ2luZyI+CisgICAgICAgICAgPHQgaGFuZ1RleHQ9Im1lbWJlcnMiPgorICAg
ICAgICAgICAgQSBsaXN0IG9mIG1lbWJlcnMgb2YgdGhlIEdyb3VwLiBDYW5vbmljYWwgVHlwZXMg
IlVzZXIiIGFuZCAiR3JvdXAiIGFyZSBSRUFELU9OTFkuIAorCSAgICAgICAgVGhlICJ2YWx1ZSIg
c3ViLWF0dHJpYnV0ZSBtdXN0IGJlIHRoZSAiaWQiIGFuZCB0aGUgIiRyZWYiIHN1Yi1hdHRyaWJ1
dGUgbXVzdCBiZSB0aGUgVVJJIG9mIGEgU0NJTSByZXNvdXJjZSwKKyAgICAgICAgICAgIGVpdGhl
ciBhIFVzZXIsIG9yIGEgR3JvdXAuIFRoZSBpbnRlbnRpb24gb2YgdGhlIEdyb3VwIHR5cGUgaXMg
dG8gYWxsb3cgdGhlIFNlcnZpY2UgUHJvdmlkZXIgdG8gc3VwcG9ydAorICAgICAgICAgICAgbmVz
dGVkIEdyb3Vwcy4gU2VydmljZSBQcm92aWRlcnMgTUFZIHJlcXVpcmUgQ29uc3VtZXJzIHRvIHBy
b3ZpZGUgYSBub24tZW1wdHkgbWVtYmVycyB2YWx1ZSBiYXNlZCBvbiB0aGUKKyAgICAgICAgICAg
ICJyZXF1aXJlZCIgc3ViIGF0dHJpYnV0ZSBvZiB0aGUgIm1lbWJlcnMiIGF0dHJpYnV0ZSBpbiBH
cm91cCBSZXNvdXJjZSBTY2hlbWEuCiAgICAgICAgICAgPC90PgogICAgICAgICA8L2xpc3Q+CiAg
ICAgICA8L3Q+CkBAIC03NDEsNiArNzY3LDEwIEBADQogICAgICAgICAgICAgICAgICAgICAgICAg
ICA8L3Q+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0IGhhbmdUZXh0PSJjYXNlRXhhY3Qi
PkEgQm9vbGVhbiB2YWx1ZSB0aGF0IHNwZWNpZmllcyBpZiB0aGUgU3RyaW5nIGF0dHJpYnV0ZSBp
cyBjYXNlIHNlbnNpdGl2ZS4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90PgorICAgICAg
ICAgICAgICAgICAgICAgICAgICA8dCBoYW5nVGV4dD0icmVmZXJlbmNlVHlwZXMiPgorICAgICAg
ICAgICAgICAgICAgICAgICAgICAgIFRoZSBuYW1lcyBvZiB0aGUgUmVzb3VyY2VzIHRoYXQgbWF5
IGJlIHJlZmVyZW5jZWQ7IGUuZy4sIFVzZXIuIFRoaXMgaXMgb25seSBhcHBsaWNhYmxlCisgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgZm9yIGF0dHJpYnV0ZXMgdGhhdCBhcmUgb2YgdGhlICJy
ZWZlcmVuY2UiIGRhdGEgdHlwZS4KKyAgICAgICAgICAgICAgICAgICAgICAgICAgPC90PgogCiAg
ICAgICAgICAgICAgICAgICAgICAgICAgIDx0PlRoZSBmb2xsb3dpbmcgbXVsdGktdmFsdWVkIGF0
dHJpYnV0ZXMgYXJlIGRlZmluZWQuIFRoZXJlIGFyZSBubyBjYW5vbmljYWwgdHlwZSB2YWx1ZXMg
ZGVmaW5lZAogICAgICAgICAgICAgICAgICAgICAgICAgICAgIGFuZCB0aGUgcHJpbWFyeSB2YWx1
ZSBzZXJ2ZXMgbm8gdXNlZnVsIHB1cnBvc2UuCkBAIC03NjAsNiArNzkwLDEwIEBADQogICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0IGhhbmdUZXh0PSJjYXNlRXhhY3QiPkEgQm9v
bGVhbiB2YWx1ZSB0aGF0IHNwZWNpZmllcyBpZiB0aGUgU3RyaW5nIGF0dHJpYnV0ZQogICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaXMgY2FzZSBzZW5zaXRpdmUuCiAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90PgorICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgIDx0IGhhbmdUZXh0PSJyZWZlcmVuY2VUeXBlcyI+CisgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICBUaGUgbmFtZXMgb2YgdGhlIFJlc291cmNlcyB0aGF0IG1heSBi
ZSByZWZlcmVuY2VkOyBlLmcuLCBVc2VyLiBUaGlzIGlzIG9ubHkgYXBwbGljYWJsZQorICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZm9yIGF0dHJpYnV0ZXMgdGhhdCBhcmUgb2Yg
dGhlICJyZWZlcmVuY2UiIGRhdGEgdHlwZS4KKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICA8L3Q+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHQgaGFuZ1RleHQ9
ImNhbm9uaWNhbFZhbHVlcyI+QSBjb2xsZWN0aW9uIG9mIGNhbm9uaWNhbCB2YWx1ZXMuIFdoZW4g
YXBwbGljYWJsZSBTZXJ2aWNlCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQ
cm92aWRlcnMgTVVTVCBzcGVjaWZ5IHRoZSBjYW5vbmljYWwgdHlwZXMgc3BlY2lmaWVkIGluIHRo
ZSBjb3JlIHNjaGVtYQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgc3BlY2lm
aWNhdGlvbjsgZS5nLiwid29yayIsImhvbWUiLiBPUFRJT05BTC4KQEAgLTg3OCwxNiArOTEyLDE5
IEBADQogICAicGFzc3dvcmQiOiJ0MW1lTWEkaGVlbiIsCiAgICJncm91cHMiOiBbCiAgICAgewot
ICAgICAgImRpc3BsYXkiOiAiVG91ciBHdWlkZXMiLAotICAgICAgInZhbHVlIjogIjAwMzAwMDAw
MDA1TjJZNkFBIgorICAgICAgInZhbHVlIjogImU5ZTMwZGJhLWYwOGYtNDEwOS04NDg2LWQ1YzZh
MzMxNjYwYSIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL0dyb3Vwcy9l
OWUzMGRiYS1mMDhmLTQxMDktODQ4Ni1kNWM2YTMzMTY2MGEiLAorICAgICAgImRpc3BsYXkiOiAi
VG91ciBHdWlkZXMiCiAgICAgfSwKICAgICB7Ci0gICAgICAiZGlzcGxheSI6ICJFbXBsb3llZXMi
LAotICAgICAgInZhbHVlIjogIjAwMzAwMDAwMDA1TjM0SDc4IgorICAgICAgInZhbHVlIjogImZj
MzQ4YWE4LTM4MzUtNDBlYi1hMjBiLWM3MjZlMTVjNTViNSIsCisgICAgICAiJHJlZiI6ICJodHRw
czovL2V4YW1wbGUuY29tL3YxL0dyb3Vwcy9mYzM0OGFhOC0zODM1LTQwZWItYTIwYi1jNzI2ZTE1
YzU1YjUiLAorICAgICAgImRpc3BsYXkiOiAiRW1wbG95ZWVzIgogICAgIH0sCiAgICAgewotICAg
ICAgImRpc3BsYXkiOiAiVVMgRW1wbG95ZWVzIiwKLSAgICAgICJ2YWx1ZSI6ICIwMDMwMDAwMDAw
NU45OFlUMSIKKyAgICAgICJ2YWx1ZSI6ICI3MWRkYWNkMi1hOGU3LTQ5YjgtYTVkYi1hZTUwZDBh
NWJmZDciLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91cHMvNzFk
ZGFjZDItYThlNy00OWI4LWE1ZGItYWU1MGQwYTViZmQ3IiwKKyAgICAgICJkaXNwbGF5IjogIlVT
IEVtcGxveWVlcyIKICAgICB9CiAgIF0sCiAgICJ4NTA5Q2VydGlmaWNhdGVzIjogWwpAQCAtMTAx
MiwxNCArMTA0OSwxNyBAQA0KICAgImdyb3VwcyI6IFsKICAgICB7CiAgICAgICAidmFsdWUiOiAi
ZTllMzBkYmEtZjA4Zi00MTA5LTg0ODYtZDVjNmEzMzE2NjBhIiwKKyAgICAgICIkcmVmIjogImh0
dHBzOi8vZXhhbXBsZS5jb20vdjEvR3JvdXBzL2U5ZTMwZGJhLWYwOGYtNDEwOS04NDg2LWQ1YzZh
MzMxNjYwYSIsCiAgICAgICAiZGlzcGxheSI6ICJUb3VyIEd1aWRlcyIKICAgICB9LAogICAgIHsK
ICAgICAgICJ2YWx1ZSI6ICJmYzM0OGFhOC0zODM1LTQwZWItYTIwYi1jNzI2ZTE1YzU1YjUiLAor
ICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91cHMvZmMzNDhhYTgtMzgz
NS00MGViLWEyMGItYzcyNmUxNWM1NWI1IiwKICAgICAgICJkaXNwbGF5IjogIkVtcGxveWVlcyIK
ICAgICB9LAogICAgIHsKICAgICAgICJ2YWx1ZSI6ICI3MWRkYWNkMi1hOGU3LTQ5YjgtYTVkYi1h
ZTUwZDBhNWJmZDciLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91
cHMvNzFkZGFjZDItYThlNy00OWI4LWE1ZGItYWU1MGQwYTViZmQ3IiwKICAgICAgICJkaXNwbGF5
IjogIlVTIEVtcGxveWVlcyIKICAgICB9CiAgIF0sCkBAIC0xMDUzLDYgKzEwOTMsNyBAQA0KICAg
ICAiZGVwYXJ0bWVudCI6ICJUb3VyIE9wZXJhdGlvbnMiLAogICAgICJtYW5hZ2VyIjogewogICAg
ICAgIm1hbmFnZXJJZCI6ICIyNjExODkxNS02MDkwLTQ2MTAtODdlNC00OWQ4Y2E5ZjgwOGQiLAor
ICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Vc2Vycy8yNjExODkxNS02MDkw
LTQ2MTAtODdlNC00OWQ4Y2E5ZjgwOGQiLAogICAgICAgImRpc3BsYXlOYW1lIjogIkpvaG4gU21p
dGgiCiAgICAgfQogICB9LApAQCAtMTA4MCwxMCArMTEyMSwxMiBAQA0KICAgIm1lbWJlcnMiOiBb
CiAgICAgewogICAgICAgInZhbHVlIjogIjI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkw
NDY0NiIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL1VzZXJzLzI4MTlj
MjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NiIsCiAgICAgICAiZGlzcGxheSI6ICJCYWJz
IEplbnNlbiIKICAgICB9LAogICAgIHsKICAgICAgICJ2YWx1ZSI6ICI5MDJjMjQ2Yi02MjQ1LTQx
OTAtOGUwNS0wMDgxNmJlNzM0NGEiLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNv
bS92MS9Vc2Vycy85MDJjMjQ2Yi02MjQ1LTQxOTAtOGUwNS0wMDgxNmJlNzM0NGEiLAogICAgICAg
ImRpc3BsYXkiOiAiTWFuZHkgUGVwcGVyaWRnZSIKICAgICB9CiAgIF0KSW5kZXg6IGRyYWZ0LWll
dGYtc2NpbS1hcGktMDEueG1sDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQotLS0gZHJhZnQtaWV0Zi1zY2ltLWFwaS0w
MS54bWwJKHJldmlzaW9uIDIwNykNCisrKyBkcmFmdC1pZXRmLXNjaW0tYXBpLTAxLnhtbAkod29y
a2luZyBjb3B5KQ0KQEAgLTk4Myw2ICs5ODMsNyBAQA0KICAgIm1lbWJlcnMiOiBbCiAgICAgewog
ICAgICAgImRpc3BsYXkiOiAiQmFicyBKZW5zZW4iLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9l
eGFtcGxlLmNvbS92MS9Vc2Vycy8yODE5YzIyMy03Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5MDQ2NDYi
LAogICAgICAgInZhbHVlIjogIjI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NiIK
ICAgICB9CiAgIF0KQEAgLTEwMzYsNiArMTAzNyw3IEBADQogICAibWVtYmVycyI6IFsKICAgICB7
CiAgICAgICAiZGlzcGxheSI6ICJCYWJzIEplbnNlbiIsCisgICAgICAiJHJlZiI6ICJodHRwczov
L2V4YW1wbGUuY29tL3YxL1VzZXJzLzI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0
NiIsCiAgICAgICAidmFsdWUiOiAiMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2
IgogICAgICAgIm9wZXJhdGlvbiI6ICJkZWxldGUiCiAgICAgfQpAQCAtMTA5NSwxMCArMTA5Nywx
MiBAQA0KICAgIm1lbWJlcnMiOiBbCiAgICAgewogICAgICAgImRpc3BsYXkiOiAiQmFicyBKZW5z
ZW4iLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Vc2Vycy8yODE5YzIy
My03Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5MDQ2NDYiLAogICAgICAgInZhbHVlIjogIjI4MTljMjIz
LTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NiIKICAgICB9LAogICAgIHsKICAgICAgICJkaXNw
bGF5IjogIkphbWVzIFNtaXRoIiwKKyAgICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20v
djEvVXNlcnMvMDhlMWQwNWQtMTIxYy00NTYxLThiOTYtNDczZDkzZGY5MjEwIiwKICAgICAgICJ2
YWx1ZSI6ICIwOGUxZDA1ZC0xMjFjLTQ1NjEtOGI5Ni00NzNkOTNkZjkyMTAiCiAgICAgfQogICBd
CkBAIC0xMTI2LDExICsxMTMwLDEzIEBADQogICAibWVtYmVycyI6IFsKICAgICB7CiAgICAgICAi
ZGlzcGxheSI6ICJCYWJzIEplbnNlbiIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUu
Y29tL3YxL1VzZXJzLzI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NiIsCiAgICAg
ICAidmFsdWUiOiAiMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2IgogICAgICAg
Im9wZXJhdGlvbiI6ICJkZWxldGUiCiAgICAgfSwKICAgICB7CiAgICAgICAiZGlzcGxheSI6ICJK
YW1lcyBTbWl0aCIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL1VzZXJz
LzA4ZTFkMDVkLTEyMWMtNDU2MS04Yjk2LTQ3M2Q5M2RmOTIxMCIsCiAgICAgICAidmFsdWUiOiAi
MDhlMWQwNWQtMTIxYy00NTYxLThiOTYtNDczZDkzZGY5MjEwIgogICAgIH0KICAgXQpAQCAtMTg2
Myw3ICsxODY5LDggQEANCiAgICJtZW1iZXJzIjogWwogICAgIHsKICAgICAgICJ2YWx1ZSI6ICI5
MmI3MjVjZC05NDY1LTRlN2QtOGMxNi0wMWY4ZTE0NmI4N2EiLAotICAgICAgInR5cGUiOiAidXNl
ciIKKyAgICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20vdjEvVXNlcnMvOTJiNzI1Y2Qt
OTQ2NS00ZTdkLThjMTYtMDFmOGUxNDZiODdhIiwKKyAgICAgICJ0eXBlIjogIlVzZXIiCiAgICAg
fQogICBdCiB9XV0+PC9hcnR3b3JrPgpAQCAtMjAyNiw3ICsyMDMzLDggQEANCiAgICAgICAibWVt
YmVycyI6IFsKICAgICAgICAgewogICAgICAgICAgICJ2YWx1ZSI6ICI2YzViYjQ2OC0xNGIyLTQx
ODMtYmFmMi0wNmQ1MjNlMDNiZDMiLAotICAgICAgICAgICJ0eXBlIjogImdyb3VwIgorICAgICAg
ICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20vdjEvR3JvdXBzLzZjNWJiNDY4LTE0YjIt
NDE4My1iYWYyLTA2ZDUyM2UwM2JkMyIsCisgICAgICAgICAgInR5cGUiOiAiR3JvdXAiCiAgICAg
ICAgIH0KICAgICAgIF0KICAgICB9LApAQCAtMjA0NSw3ICsyMDUzLDggQEANCiAgICAgICAibWVt
YmVycyI6IFsKICAgICAgICAgewogICAgICAgICAgICJ2YWx1ZSI6ICJjM2EyNmRkMy0yN2EwLTRk
ZWMtYTJhYy1jZTIxMWUxMDVmOTciLAotICAgICAgICAgICJ0eXBlIjogImdyb3VwIgorICAgICAg
ICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20vdjEvR3JvdXBzL2MzYTI2ZGQzLTI3YTAt
NGRlYy1hMmFjLWNlMjExZTEwNWY5NyIsCisgICAgICAgICAgInR5cGUiOiAiR3JvdXAiCiAgICAg
ICAgIH0KICAgICAgIF0KICAgICB9CkluZGV4OiBkcmFmdC1pZXRmLXNjaW0tY29yZS1zY2hlbWEt
MDEudHh0DQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09DQotLS0gZHJhZnQtaWV0Zi1zY2ltLWNvcmUtc2NoZW1hLTAxLnR4
dAkocmV2aXNpb24gMjA3KQ0KKysrIGRyYWZ0LWlldGYtc2NpbS1jb3JlLXNjaGVtYS0wMS50eHQJ
KHdvcmtpbmcgY29weSkNCkBAIC0xMjYsMzAgKzEyNiwzMSBAQA0KICAgICAgICAzLjEuNC4gIElu
dGVnZXIgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNgog
ICAgICAgIDMuMS41LiAgRGF0ZVRpbWUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuICA2CiAgICAgICAgMy4xLjYuICBCaW5hcnkgLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYKLSAgICAgICAzLjEuNy4gIENvbXBsZXgg
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNworICAgICAg
IDMuMS43LiAgUmVmZXJlbmNlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuICA3CisgICAgICAgMy4xLjguICBDb21wbGV4ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcKICAgICAgMy4yLiAgTXVsdGktdmFsdWVkIEF0dHJp
YnV0ZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNwogICAgNC4gIFNjaGVt
YSBFeHRlbnNpb24gTW9kZWwgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
ICA4Ci0gICA1LiAgU0NJTSBDb3JlIFNjaGVtYSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gIDgKLSAgICAgNS4xLiAgQ29tbW9uIFNjaGVtYSBBdHRyaWJ1dGVz
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOAotICAgICA1LjIuICAic2NoZW1h
cyIgQXR0cmlidXRlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5Cisg
ICA1LiAgU0NJTSBDb3JlIFNjaGVtYSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gIDkKKyAgICAgNS4xLiAgQ29tbW9uIFNjaGVtYSBBdHRyaWJ1dGVzIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOQorICAgICA1LjIuICAic2NoZW1hcyIgQXR0
cmlidXRlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEwCiAgICA2LiAg
U0NJTSBVc2VyIFNjaGVtYSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gMTAKICAgICAgNi4xLiAgU2luZ3VsYXIgQXR0cmlidXRlcyAgLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMAogICAgICA2LjIuICBNdWx0aS12YWx1ZWQgQXR0cmli
dXRlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEyCi0gICA3LiAgU0NJTSBF
bnRlcnByaXNlIFVzZXIgU2NoZW1hIEV4dGVuc2lvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
MTQKKyAgIDcuICBTQ0lNIEVudGVycHJpc2UgVXNlciBTY2hlbWEgRXh0ZW5zaW9uICAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAxNQogICAgOC4gIFNDSU0gR3JvdXAgU2NoZW1hICAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE1Ci0gICA5LiAgU2VydmljZSBQcm92
aWRlciBDb25maWd1cmF0aW9uIFNjaGVtYSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTUKLSAg
IDEwLiBSZXNvdXJjZSBTY2hlbWEgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAxNwotICAgMTEuIEpTT04gUmVwcmVzZW50YXRpb24gIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE5Ci0gICAgIDExLjEuIE1pbmltYWwgVXNlciBS
ZXByZXNlbnRhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTkKLSAgICAgMTEu
Mi4gRnVsbCBVc2VyIFJlcHJlc2VudGF0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAxOQotICAgICAxMS4zLiBFbnRlcnByaXNlIFVzZXIgRXh0ZW5zaW9uIFJlcHJlc2VudGF0
aW9uIC4gLiAuIC4gLiAuIC4gLiAuIDIyCi0gICAgIDExLjQuIEdyb3VwIFJlcHJlc2VudGF0aW9u
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjUKLSAgICAgMTEuNS4gU2Vy
dmljZSBQcm92aWRlciBDb25maWd1cmF0aW9uIFJlcHJlc2VudGF0aW9uICAuIC4gLiAuIC4gLiAy
NQotICAgICAxMS42LiBSZXNvdXJjZSBTY2hlbWEgUmVwcmVzZW50YXRpb24gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIDI3Ci0gICAxMi4gU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMzEKLSAgIEFwcGVuZGl4IEEuICBDb250
cmlidXRvcnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAzMQotICAg
MTMuIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIDMyCi0gICBBdXRob3JzJyBBZGRyZXNzZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMzIKKyAgIDkuICBTZXJ2aWNlIFByb3ZpZGVyIENv
bmZpZ3VyYXRpb24gU2NoZW1hICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNgorICAgMTAuIFJl
c291cmNlIFNjaGVtYSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIDE4CisgICAxMS4gSlNPTiBSZXByZXNlbnRhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gMjAKKyAgICAgMTEuMS4gTWluaW1hbCBVc2VyIFJlcHJlc2Vu
dGF0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyMAorICAgICAxMS4yLiBGdWxs
IFVzZXIgUmVwcmVzZW50YXRpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDIw
CisgICAgIDExLjMuIEVudGVycHJpc2UgVXNlciBFeHRlbnNpb24gUmVwcmVzZW50YXRpb24gLiAu
IC4gLiAuIC4gLiAuIC4gMjMKKyAgICAgMTEuNC4gR3JvdXAgUmVwcmVzZW50YXRpb24gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyNgorICAgICAxMS41LiBTZXJ2aWNlIFBy
b3ZpZGVyIENvbmZpZ3VyYXRpb24gUmVwcmVzZW50YXRpb24gIC4gLiAuIC4gLiAuIDI3CisgICAg
IDExLjYuIFJlc291cmNlIFNjaGVtYSBSZXByZXNlbnRhdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gMjgKKyAgIDEyLiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAzMgorICAgQXBwZW5kaXggQS4gIENvbnRyaWJ1dG9y
cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDMyCisgICAxMy4gTm9y
bWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gMzMKKyAgIEF1dGhvcnMnIEFkZHJlc3NlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAzMwogCiAKIApAQCAtMTYzLDcgKzE2NCw2IEBADQogCiAKIAot
CiBNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAg
ICAgICAgICAgW1BhZ2UgM10KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0t
Y29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgpAQCAtMzM3LDggKzMzNywyOSBA
QA0KIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAg
ICAgICAgTm92ZW1iZXIgMjAxMgogCiAKLTMuMS43LiAgQ29tcGxleAorMy4xLjcuICBSZWZlcmVu
Y2UKIAorICAgQSByZWZlcmVuY2UgdG8gYSBTQ0lNIFJlc291cmNlLiAgVGhlIHZhbHVlIE1VU1Qg
YmUgdGhlIGFic29sdXRlIG9yCisgICByZWxhdGl2ZSBVUkkgb2YgdGhlIHRhcmdldCBSZXNvdXJj
ZS4gIFJlbGF0aXZlIFVSSXMgc2hvdWxkIGJlCisgICByZXNvbHZlZCBhcyBzcGVjaWZpZWQgaW4g
c2VjdGlvbiA1LjIgb2YgUkZDIDM5ODYuICBUaGUgYmFzZSBVUkkgZm9yCisgICByZWxhdGl2ZSBV
UkkgcmVzb2x1dGlvbiBNVVNUIGluY2x1ZGUgYWxsIFVSSSBjb21wb25lbnRzIGFuZCBwYXRoCisg
ICBzZWdtZW50cyB1cCB0byBidXQgbm90IGluY2x1ZGluZyB0aGUgRW5kcG9pbnQgVVJJOyBlLmcu
LCB0aGUgYmFzZSBVUkkKKyAgIGZvciBhIHJlcXVlc3QgdG8KKyAgIGh0dHBzOi8vZXhhbXBsZS5j
b20vdjEvVXNlcnMvMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2CisgICB3b3Vs
ZCBiZSBodHRwczovL2V4YW1wbGUuY29tL3YxLyBhbmQgdGhlIHJlbGF0aXZlIFVSSSBmb3IgdGhp
cworICAgUmVzb3VyY2Ugd291bGQgYmUgVXNlcnMvMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEz
ODYxOTA0NjQ2LgorCisgICBQZXJmb3JtaW5nIGEgR0VUIG9wZXJhdGlvbiBvbiBhIHJlZmVyZW5j
ZSBVUkkgTVVTVCByZXR1cm4gdGhlIHRhcmdldAorICAgUmVzb3VyY2Ugb3IgYW4gYXBwcm9wcmlh
dGUgSFRUUCByZXNwb25zZSBjb2RlLiAgVGhlIFNlcnZpY2UgUHJvdmlkZXIKKyAgIE1BWSBvcHRp
b25hbGx5IGNob29zZSB0byBlbmZvcmNlIHJlZmVyZW50aWFsIGludGVncml0eSBmb3IKKyAgIHJl
ZmVyZW5jZXMuCisKKyAgIEJ5IGNvbnZlbnRpb24sIGEgcmVmZXJlbmNlIGlzIGNvbW1vbmx5IHJl
cHJlc2VudGVkIGFzIGEgIiRyZWYiIHN1Yi0KKyAgIGF0dHJpYnV0ZSBpbiBjb21wbGV4IG9yIG11
bHRpLXZhbHVlZCBhdHRyaWJ1dGVzLCBob3dldmVyIHRoaXMgaXMKKyAgIE9QVElPTkFMLgorCisz
LjEuOC4gIENvbXBsZXgKKwogICAgQSBTaW5ndWxhciBvciBNdWx0aS12YWx1ZWQgQXR0cmlidXRl
IHdob3NlIHZhbHVlIGlzIGEgY29tcG9zaXRpb24gb2YKICAgIG9uZSBvciBtb3JlIFNpbXBsZSBB
dHRyaWJ1dGVzLiAgVGhlIEpTT04gZm9ybWF0IGlzIGRlZmluZWQgaW4gc2VjdGlvbgogICAgMi4y
IG9mIFJGQyA0NjI3LgpAQCAtMzYyLDYgKzM4MywxNiBAQA0KICAgIGRpc3BsYXkgIEEgaHVtYW4g
cmVhZGFibGUgbmFtZSwgcHJpbWFyaWx5IHVzZWQgZm9yIGRpc3BsYXkgcHVycG9zZXMuCiAgICAg
ICBSRUFELU9OTFkuCiAKKworCisKKworCitNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBp
cmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICAgW1BhZ2UgN10KKwwKK0ludGVybmV0LURy
YWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIg
MjAxMgorCisKICAgIG9wZXJhdGlvbiAgVGhlIG9wZXJhdGlvbiB0byBwZXJmb3JtIG9uIHRoZSBt
dWx0aS12YWx1ZWQgYXR0cmlidXRlCiAgICAgICBkdXJpbmcgYSBQQVRDSCByZXF1ZXN0LiAgVGhl
IG9ubHkgdmFsaWQgdmFsdWUgaXMgImRlbGV0ZSIsIHdoaWNoCiAgICAgICBzaWduaWZpZXMgdGhh
dCB0aGlzIGluc3RhbmNlIHNob3VsZCBiZSByZW1vdmVkIGZyb20gdGhlIFJlc291cmNlLgpAQCAt
Mzg1LDE0ICs0MTYsNiBAQA0KICAgIH0KIAogCi0KLQotCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAg
ICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICAgW1BhZ2UgN10KLQwKLUlu
dGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAg
Tm92ZW1iZXIgMjAxMgotCi0KICAgIFdoZW4gcmV0dXJuaW5nIG11bHRpLXZhbHVlZCBhdHRyaWJ1
dGVzLCBTZXJ2aWNlIFByb3ZpZGVycyBTSE9VTEQKICAgIGNhbm9uaWNhbGl6ZSB0aGUgdmFsdWUg
cmV0dXJuZWQsIGlmIGFwcHJvcHJpYXRlIChlLmcuIGZvciBlLW1haWwKICAgIGFkZHJlc3NlcyBh
bmQgVVJMcykuICBQcm92aWRlcnMgTUFZIHJldHVybiB0aGUgc2FtZSB2YWx1ZSBtb3JlIHRoYW4K
QEAgLTQxNyw2ICs0NDAsMTUgQEANCiAgICBhdHRyaWJ1dGVzLgogCiAKKworCisKKworTW9ydGlt
b3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAg
IFtQYWdlIDhdCisMCitJbnRlcm5ldC1EcmFmdCAgICAgICAgICBkcmFmdC1zY2ltLWNvcmUtc2No
ZW1hLTAxICAgICAgICAgIE5vdmVtYmVyIDIwMTIKKworCiA1LiAgU0NJTSBDb3JlIFNjaGVtYQog
CiA1LjEuICBDb21tb24gU2NoZW1hIEF0dHJpYnV0ZXMKQEAgLTQzOCwxNyArNDcwLDYgQEANCiAg
ICAgICBrZXl3b3JkIGFuZCBNVVNUIE5PVCBiZSB1c2VkIGluIHRoZSB1bmlxdWUgaWRlbnRpZmll
ci4gIFJFUVVJUkVECiAgICAgICBhbmQgUkVBRC1PTkxZLgogCi0KLQotCi0KLQotCi1Nb3J0aW1v
cmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICAg
W1BhZ2UgOF0KLQwKLUludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hl
bWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgotCi0KICAgIGV4dGVybmFsSWQgIEFuIGlkZW50
aWZpZXIgZm9yIHRoZSBSZXNvdXJjZSBhcyBkZWZpbmVkIGJ5IHRoZSBTZXJ2aWNlCiAgICAgICBD
b25zdW1lci4gIFRoZSBleHRlcm5hbElkIG1heSBzaW1wbGlmeSBpZGVudGlmaWNhdGlvbiBvZiB0
aGUKICAgICAgIFJlc291cmNlIGJldHdlZW4gU2VydmljZSBDb25zdW1lciBhbmQgU2VydmljZSBw
cm92aWRlciBieSBhbGxvd2luZwpAQCAtNDczLDYgKzQ5NCwxNyBAQA0KICAgICAgICAgIHRoZSB2
YWx1ZSBNVVNUIGJlIHRoZSBzYW1lIGFzIHRoZSB2YWx1ZSBvZiBjcmVhdGVkLiAgVGhlCiAgICAg
ICAgICBhdHRyaWJ1dGUgTVVTVCBiZSBhIERhdGVUaW1lLiAgUkVBRC1PTkxZLgogCisKKworCisK
KworCitNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAg
ICAgICAgICAgICAgW1BhZ2UgOV0KKwwKK0ludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNj
aW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgorCisKICAgICAgIGxvY2F0
aW9uICBUaGUgVVJJIG9mIHRoZSBSZXNvdXJjZSBiZWluZyByZXR1cm5lZC4gIFRoaXMgdmFsdWUg
TVVTVAogICAgICAgICAgYmUgdGhlIHNhbWUgYXMgdGhlIExvY2F0aW9uIEhUVFAgcmVzcG9uc2Ug
aGVhZGVyLiAgUkVBRC1PTkxZLgogCkBAIC00OTcsMTQgKzUyOSw2IEBADQogICAgICAgcmVwcmVz
ZW50YXRpb24uICBFYWNoIFN0cmluZyB2YWx1ZSBtdXN0IGJlIGEgdW5pcXVlIFVSSS4gIFRoaXMK
ICAgICAgIHNwZWNpZmljYXRpb24gZGVmaW5lcyBVUklzIGZvciBVc2VyLCBHcm91cCwgYW5kIGEg
c3RhbmRhcmQKICAgICAgICJlbnRlcnByaXNlIiBleHRlbnNpb24uICBBbGwgcmVwcmVzZW50YXRp
b25zIG9mIFNDSU0gc2NoZW1hIE1VU1QKLQotCi0KLU1vcnRpbW9yZSwgZXQgYWwuICAgICAgICAg
IEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgICBbUGFnZSA5XQotDAotSW50ZXJu
ZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBOb3Zl
bWJlciAyMDEyCi0KLQogICAgICAgaW5jbHVkZSBhIG5vbi16ZXJvIHZhbHVlIGFycmF5IHdpdGgg
dmFsdWUocykgb2YgdGhlIFVSSXMgc3VwcG9ydGVkCiAgICAgICBieSB0aGF0IHJlcHJlc2VudGF0
aW9uLiAgRHVwbGljYXRlIHZhbHVlcyBNVVNUIE5PVCBiZSBpbmNsdWRlZC4KICAgICAgIFZhbHVl
IG9yZGVyIGlzIG5vdCBzcGVjaWZpZWQgYW5kIE1VU1Qgbm90IGltcGFjdCBiZWhhdmlvci4KQEAg
LTUyOCw2ICs1NTIsMTUgQEANCiAgICAgICB1c2VyTmFtZSB2YWx1ZS4gIFRoaXMgaWRlbnRpZmll
ciBNVVNUIGJlIHVuaXF1ZSBhY3Jvc3MgdGhlIFNlcnZpY2UKICAgICAgIENvbnN1bWVyJ3MgZW50
aXJlIHNldCBvZiBVc2Vycy4gIFJFUVVJUkVELgogCisKKworCisKK01vcnRpbW9yZSwgZXQgYWwu
ICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDEwXQor
DAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAg
ICAgICBOb3ZlbWJlciAyMDEyCisKKwogICAgbmFtZSAgVGhlIGNvbXBvbmVudHMgb2YgdGhlIFVz
ZXIncyByZWFsIG5hbWUuICBQcm92aWRlcnMgTUFZIHJldHVybgogICAgICAganVzdCB0aGUgZnVs
bCBuYW1lIGFzIGEgc2luZ2xlIHN0cmluZyBpbiB0aGUgZm9ybWF0dGVkIHN1Yi0KICAgICAgIGF0
dHJpYnV0ZSwgb3IgdGhleSBNQVkgcmV0dXJuIGp1c3QgdGhlIGluZGl2aWR1YWwgY29tcG9uZW50
CkBAIC01NTEsMTYgKzU4NCw2IEBADQogICAgICAgbWlkZGxlTmFtZSAgVGhlIG1pZGRsZSBuYW1l
KHMpIG9mIHRoZSBVc2VyIChlLmcuICBKYW5lIGdpdmVuIHRoZQogICAgICAgICAgZnVsbCBuYW1l
IE1zLiBCYXJiYXJhIEphbmUgSmVuc2VuLCBJSUkuKS4KIAotCi0KLQotCi0KLU1vcnRpbW9yZSwg
ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdl
IDEwXQotDAotSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0w
MSAgICAgICAgICBOb3ZlbWJlciAyMDEyCi0KLQogICAgICAgaG9ub3JpZmljUHJlZml4ICBUaGUg
aG9ub3JpZmljIHByZWZpeChlcykgb2YgdGhlIFVzZXIsIG9yICJUaXRsZSIKICAgICAgICAgIGlu
IG1vc3QgV2VzdGVybiBsYW5ndWFnZXMgKGUuZy4gIE1zLiBnaXZlbiB0aGUgZnVsbCBuYW1lIE1z
LgogICAgICAgICAgQmFyYmFyYSBKYW5lIEplbnNlbiwgSUlJLikuCkBAIC01ODMsNiArNjA2LDE3
IEBADQogICAgICAgYmUgdXNlZCB0byByZXByZXNlbnQgYSBVc2VyJ3MgdXNlcm5hbWUgKGUuZy4g
YmplbnNlbiBvcgogICAgICAgbXBlcHBlcmlkZ2UpLgogCisKKworCisKKworCitNb3J0aW1vcmUs
IGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFn
ZSAxMV0KKwwKK0ludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEt
MDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgorCisKICAgIHByb2ZpbGVVcmwgIEEgZnVsbHkgcXVh
bGlmaWVkIFVSTCB0byBhIHBhZ2UgcmVwcmVzZW50aW5nIHRoZSBVc2VyJ3MKICAgICAgIG9ubGlu
ZSBwcm9maWxlLgogCkBAIC02MDYsMTcgKzY0MCw2IEBADQogICAgICAgMzE2Ni0xIDIgbGV0dGVy
IGNvdW50cnkgY29kZSBbNl07IGUuZy4sICdlbl9VUycgc3BlY2lmaWVzIHRoZQogICAgICAgbGFu
Z3VhZ2UgRW5nbGlzaCBhbmQgY291bnRyeSBVUy4KIAotCi0KLQotCi0KLQotTW9ydGltb3JlLCBl
dCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2Ug
MTFdCi0MCi1JbnRlcm5ldC1EcmFmdCAgICAgICAgICBkcmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAx
ICAgICAgICAgIE5vdmVtYmVyIDIwMTIKLQotCiAgICB0aW1lem9uZSAgVGhlIFVzZXIncyB0aW1l
IHpvbmUgaW4gdGhlICJPbHNvbiIgdGltZXpvbmUgZGF0YWJhc2UKICAgICAgIGZvcm1hdCBbN107
IGUuZy4sJ0FtZXJpY2EvTG9zX0FuZ2VsZXMnLgogCkBAIC02NDIsNiArNjY1LDE0IEBADQogICAg
ICAgaW5zdGVhZCBvZiBiamVuc2VuQEVYQU1QTEUuQ09NLiAgQ2Fub25pY2FsIFR5cGUgdmFsdWVz
IG9mIHdvcmssCiAgICAgICBob21lLCBhbmQgb3RoZXIuCiAKKworCisKK01vcnRpbW9yZSwgZXQg
YWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDEy
XQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAg
ICAgICAgICBOb3ZlbWJlciAyMDEyCisKKwogICAgcGhvbmVOdW1iZXJzICBQaG9uZSBudW1iZXJz
IGZvciB0aGUgVXNlci4gIFRoZSB2YWx1ZSBTSE9VTEQgYmUKICAgICAgIGNhbm9uaWNhbGl6ZWQg
YnkgdGhlIFNlcnZpY2UgUHJvdmlkZXIgYWNjb3JkaW5nIHRvIGZvcm1hdCBpbgogICAgICAgUkZD
Mzk2NiBbOF0gZS5nLiAndGVsOisxLTIwMS01NTUtMDEyMycuICBDYW5vbmljYWwgVHlwZSB2YWx1
ZXMgb2YKQEAgLTY2NSwxNCArNjk2LDYgQEANCiAgICAgICBieSB0aGlzIFVzZXIsIGJ1dCBzcGVj
aWZpY2FsbHkgcHJvZmlsZSBwaG90b3Mgb2YgdGhlIFVzZXIgc3VpdGFibGUKICAgICAgIGZvciBk
aXNwbGF5IHdoZW4gZGVzY3JpYmluZyB0aGUgVXNlci4gIEluc3RlYWQgb2YgdGhlIHN0YW5kYXJk
CiAgICAgICBDYW5vbmljYWwgVmFsdWVzIGZvciB0eXBlLCB0aGlzIGF0dHJpYnV0ZSBkZWZpbmVz
IHRoZSBmb2xsb3dpbmcKLQotCi0KLU1vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg
TWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDEyXQotDAotSW50ZXJuZXQtRHJhZnQg
ICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBOb3ZlbWJlciAyMDEy
Ci0KLQogICAgICAgQ2Fub25pY2FsIFZhbHVlcyB0byByZXByZXNlbnQgcG9wdWxhciBwaG90byBz
aXplczogcGhvdG8sCiAgICAgICB0aHVtYm5haWwuCiAKQEAgLTY5NSw2ICs3MTgsMTcgQEANCiAK
ICAgICAgIHBvc3RhbENvZGUgIFRoZSB6aXBjb2RlIG9yIHBvc3RhbCBjb2RlIGNvbXBvbmVudC4K
IAorCisKKworCisKKworTW9ydGltb3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwg
MjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMTNdCisMCitJbnRlcm5ldC1EcmFmdCAgICAgICAg
ICBkcmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAxICAgICAgICAgIE5vdmVtYmVyIDIwMTIKKworCiAg
ICAgICBjb3VudHJ5ICBUaGUgY291bnRyeSBuYW1lIGNvbXBvbmVudC4gIFdoZW4gc3BlY2lmaWVk
IHRoZSB2YWx1ZQogICAgICAgICAgTVVTVCBiZSBpbiBJU08gMzE2Ni0xIGFscGhhIDIgInNob3J0
IiBjb2RlIGZvcm1hdCBbNl07IGUuZy4sCiAgICAgICAgICB0aGUgVW5pdGVkIFN0YXRlcyBhbmQg
U3dlZGVuIGFyZSAiVVMiIGFuZCAiU0UiLCByZXNwZWN0aXZlbHkuCkBAIC03MTUsMjAgKzc0OSwx
MiBAQA0KICAgICAgIG1lbWJlcnNoaXAgdGhyb3VnaCB0aGUgR3JvdXAgcmVzb3VyY2UgYnV0IE1B
WSBtb2RpZnkgZGlyZWN0IGdyb3VwCiAgICAgICBtZW1iZXJzaGlwIHRocm91Z2ggdGhlIEdyb3Vw
IHJlc291cmNlIHdoaWNoIE1BWSBpbmZsdWVuY2UgaW5kaXJlY3QKICAgICAgIG1lbWJlcnNoaXBz
LiAgSWYgdGhlIFNDSU0gU2VydmljZSBQcm92aWRlciBleHBvc2VzIGEgR3JvdXAKLSAgICAgIHJl
c291cmNlLCB0aGUgdmFsdWUgTVVTVCBiZSB0aGUgImlkIiBhdHRyaWJ1dGUgb2YgdGhlCi0gICAg
ICBjb3JyZXNwb25kaW5nIEdyb3VwIHJlc291cmNlcyB0byB3aGljaCB0aGUgdXNlciBiZWxvbmdz
LiAgU2luY2UKLSAgICAgIHRoaXMgYXR0cmlidXRlIGlzIHJlYWQtb25seSwgZ3JvdXAgbWVtYmVy
c2hpcCBjaGFuZ2VzIE1VU1QgYmUKLSAgICAgIGFwcGxpZWQgdmlhIHRoZSBHcm91cCBSZXNvdXJj
ZSAoU2VjdGlvbiA4KS4gIFJFQUQtT05MWS4KKyAgICAgIHJlc291cmNlLCB0aGUgInZhbHVlIiBz
dWItYXR0cmlidXRlIE1VU1QgYmUgdGhlICJpZCIgYW5kIHRoZQorICAgICAgIiRyZWYiIHN1Yi1h
dHRyaWJ1dGUgbXVzdCBiZSB0aGUgVVJJIG9mIHRoZSBjb3JyZXNwb25kaW5nIEdyb3VwCisgICAg
ICByZXNvdXJjZXMgdG8gd2hpY2ggdGhlIHVzZXIgYmVsb25ncy4gIFNpbmNlIHRoaXMgYXR0cmli
dXRlIGlzCisgICAgICByZWFkLW9ubHksIGdyb3VwIG1lbWJlcnNoaXAgY2hhbmdlcyBNVVNUIGJl
IGFwcGxpZWQgdmlhIHRoZSBHcm91cAorICAgICAgUmVzb3VyY2UgKFNlY3Rpb24gOCkuICBSRUFE
LU9OTFkuCiAKLQotCi0KLQotTW9ydGltb3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkg
NSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMTNdCi0MCi1JbnRlcm5ldC1EcmFmdCAgICAg
ICAgICBkcmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAxICAgICAgICAgIE5vdmVtYmVyIDIwMTIKLQot
CiAgICBlbnRpdGxlbWVudHMgIEEgbGlzdCBvZiBlbnRpdGxlbWVudHMgZm9yIHRoZSBVc2VyIHRo
YXQgcmVwcmVzZW50IGEKICAgICAgIHRoaW5nIHRoZSBVc2VyIGhhcy4gIFRoYXQgaXMsIGFuIGVu
dGl0bGVtZW50IGlzIGFuIGFkZGl0aW9uYWwKICAgICAgIHJpZ2h0IHRvIGEgdGhpbmcsIG9iamVj
dCBvciBzZXJ2aWNlLiAgTm8gdm9jYWJ1bGFyeSBvciBzeW50YXggaXMKQEAgLTc0OSw2ICs3NzUs
MTYgQEANCiAgICAgICBOTyBjYW5vbmljYWwgdHlwZXMuCiAKIAorCisKKworCisKK01vcnRpbW9y
ZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQ
YWdlIDE0XQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVt
YS0wMSAgICAgICAgICBOb3ZlbWJlciAyMDEyCisKKwogNy4gIFNDSU0gRW50ZXJwcmlzZSBVc2Vy
IFNjaGVtYSBFeHRlbnNpb24KIAogICAgVGhlIGZvbGxvd2luZyBTQ0lNIGV4dGVuc2lvbiBkZWZp
bmVzIGF0dHJpYnV0ZXMgY29tbW9ubHkgdXNlZCBpbgpAQCAtNzc0LDIwICs4MTAsMTIgQEANCiAg
ICAgICBTZXJ2aWNlIFByb3ZpZGVycyB0byByZXByZXNlbnQgb3JnYW5pemF0aW9uYWwgaGllcmFy
Y2h5IGJ5CiAgICAgICByZWZlcmVuY2luZyB0aGUgImlkIiBhdHRyaWJ1dGUgb2YgYW5vdGhlciBV
c2VyLgogCi0KLQotCi0KLQotCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1h
eSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAxNF0KLQwKLUludGVybmV0LURyYWZ0ICAg
ICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgot
Ci0KICAgICAgIG1hbmFnZXJJZCAgVGhlIGlkIG9mIHRoZSBTQ0lNIHJlc291cmNlIHJlcHJlc2Vu
dGluZyB0aGUgVXNlcidzCiAgICAgICAgICBtYW5hZ2VyLiAgUkVRVUlSRUQuCiAKKyAgICAgICRy
ZWYgIFRoZSBVUkkgb2YgdGhlIFNDSU0gcmVzb3VyY2UgcmVwcmVzZW50aW5nIHRoZSBVc2VyJ3MK
KyAgICAgICAgIG1hbmFnZXIuICBSRVFVSVJFRC4KKwogICAgICAgZGlzcGxheU5hbWUgIFRoZSBk
aXNwbGF5TmFtZSBvZiB0aGUgVXNlcidzIG1hbmFnZXIuICBPUFRJT05BTCBhbmQKICAgICAgICAg
IFJFQUQtT05MWS4KIApAQCAtODA1LDYgKzgzMywxNCBAQA0KICAgIHNjb3BlIGZvciB0aGlzIHNw
ZWNpZmljYXRpb24uCiAKICAgIFRoZSBmb2xsb3dpbmcgU2luZ3VsYXIgQXR0cmlidXRlIGlzIGRl
ZmluZWQgaW4gYWRkaXRpb24gdG8gdGhlIGNvbW1vbgorCisKKworTW9ydGltb3JlLCBldCBhbC4g
ICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMTVdCisM
CitJbnRlcm5ldC1EcmFmdCAgICAgICAgICBkcmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAxICAgICAg
ICAgIE5vdmVtYmVyIDIwMTIKKworCiAgICBhdHRyaWJ1dGVzIGRlZmluZWQgaW4gU0NJTSBDb3Jl
IFNjaGVtYToKIAogICAgZGlzcGxheU5hbWUgIEEgaHVtYW4gcmVhZGFibGUgbmFtZSBmb3IgdGhl
IEdyb3VwLiAgUkVRVUlSRUQuCkBAIC04MTMsMTIgKzg0OSwxMyBAQA0KICAgIGNvbW1vbiBhdHRy
aWJ1dGVzIGRlZmluZWQgaW4gU0NJTSBDb3JlIFNjaGVtYToKIAogICAgbWVtYmVycyAgQSBsaXN0
IG9mIG1lbWJlcnMgb2YgdGhlIEdyb3VwLiAgQ2Fub25pY2FsIFR5cGVzICJVc2VyIiBhbmQKLSAg
ICAgICJHcm91cCIgYXJlIFJFQUQtT05MWS4gIFRoZSB2YWx1ZSBtdXN0IGJlIHRoZSAiaWQiIG9m
IGEgU0NJTQotICAgICAgcmVzb3VyY2UsIGVpdGhlciBhIFVzZXIsIG9yIGEgR3JvdXAuICBUaGUg
aW50ZW50aW9uIG9mIHRoZSBHcm91cAotICAgICAgdHlwZSBpcyB0byBhbGxvdyB0aGUgU2Vydmlj
ZSBQcm92aWRlciB0byBzdXBwb3J0IG5lc3RlZCBHcm91cHMuCi0gICAgICBTZXJ2aWNlIFByb3Zp
ZGVycyBNQVkgcmVxdWlyZSBDb25zdW1lcnMgdG8gcHJvdmlkZSBhIG5vbi1lbXB0eQotICAgICAg
bWVtYmVycyB2YWx1ZSBiYXNlZCBvbiB0aGUgInJlcXVpcmVkIiBzdWIgYXR0cmlidXRlIG9mIHRo
ZQotICAgICAgIm1lbWJlcnMiIGF0dHJpYnV0ZSBpbiBHcm91cCBSZXNvdXJjZSBTY2hlbWEuCisg
ICAgICAiR3JvdXAiIGFyZSBSRUFELU9OTFkuICBUaGUgInZhbHVlIiBzdWItYXR0cmlidXRlIG11
c3QgYmUgdGhlICJpZCIKKyAgICAgIGFuZCB0aGUgIiRyZWYiIHN1Yi1hdHRyaWJ1dGUgbXVzdCBi
ZSB0aGUgVVJJIG9mIGEgU0NJTSByZXNvdXJjZSwKKyAgICAgIGVpdGhlciBhIFVzZXIsIG9yIGEg
R3JvdXAuICBUaGUgaW50ZW50aW9uIG9mIHRoZSBHcm91cCB0eXBlIGlzIHRvCisgICAgICBhbGxv
dyB0aGUgU2VydmljZSBQcm92aWRlciB0byBzdXBwb3J0IG5lc3RlZCBHcm91cHMuICBTZXJ2aWNl
CisgICAgICBQcm92aWRlcnMgTUFZIHJlcXVpcmUgQ29uc3VtZXJzIHRvIHByb3ZpZGUgYSBub24t
ZW1wdHkgbWVtYmVycworICAgICAgdmFsdWUgYmFzZWQgb24gdGhlICJyZXF1aXJlZCIgc3ViIGF0
dHJpYnV0ZSBvZiB0aGUgIm1lbWJlcnMiCisgICAgICBhdHRyaWJ1dGUgaW4gR3JvdXAgUmVzb3Vy
Y2UgU2NoZW1hLgogCiAKIDkuICBTZXJ2aWNlIFByb3ZpZGVyIENvbmZpZ3VyYXRpb24gU2NoZW1h
CkBAIC04MzMsMTQgKzg3MCw2IEBADQogICAgZGV0YWlscyB0byBDb25zdW1lcnMuICBBbGwgYXR0
cmlidXRlcyBhcmUgUkVBRC1PTkxZLgogCiAgICBUaGUgZm9sbG93aW5nIFNpbmd1bGFyIEF0dHJp
YnV0ZXMgYXJlIGRlZmluZWQgaW4gYWRkaXRpb24gdG8gdGhlCi0KLQotCi1Nb3J0aW1vcmUsIGV0
IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAx
NV0KLQwKLUludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEg
ICAgICAgICAgTm92ZW1iZXIgMjAxMgotCi0KICAgIGNvbW1vbiBhdHRyaWJ1dGVzIGRlZmluZWQg
aW4gQ29yZSBTY2hlbWE6CiAKICAgIGRvY3VtZW50YXRpb25VcmwgIEFuIEhUVFAgYWRkcmVzc2Fi
bGUgVVJMIHBvaW50aW5nIHRvIHRoZSBTZXJ2aWNlCkBAIC04NTgsNiArODg3LDE2IEBADQogICAg
ICAgc3VwcG9ydGVkICBCb29sZWFuIHZhbHVlIHNwZWNpZnlpbmcgd2hldGhlciB0aGUgb3BlcmF0
aW9uIGlzCiAgICAgICAgICBzdXBwb3J0ZWQuICBSRVFVSVJFRC4KIAorCisKKworCisKK01vcnRp
bW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAg
IFtQYWdlIDE2XQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNj
aGVtYS0wMSAgICAgICAgICBOb3ZlbWJlciAyMDEyCisKKwogICAgICAgbWF4T3BlcmF0aW9ucyAg
QW4gaW50ZWdlciB2YWx1ZSBzcGVjaWZ5aW5nIHRoZSBtYXhpbXVtIG51bWJlciBvZgogICAgICAg
ICAgb3BlcmF0aW9ucy4gIFJFUVVJUkVELgogCkBAIC04ODcsMTYgKzkyNiw2IEBADQogICAgZXRh
ZyAgQSBjb21wbGV4IHR5cGUgdGhhdCBzcGVjaWZpZXMgRXRhZyBjb25maWd1cmF0aW9uIG9wdGlv
bnMuCiAgICAgICBSRVFVSVJFRC4KIAotCi0KLQotCi0KLU1vcnRpbW9yZSwgZXQgYWwuICAgICAg
ICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDE2XQotDAotSW50
ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBO
b3ZlbWJlciAyMDEyCi0KLQogICAgICAgc3VwcG9ydGVkICBCb29sZWFuIHZhbHVlIHNwZWNpZnlp
bmcgd2hldGhlciB0aGUgb3BlcmF0aW9uIGlzCiAgICAgICAgICBzdXBwb3J0ZWQuICBSRVFVSVJF
RC4KIApAQCAtOTEzLDYgKzk0MiwxNyBAQA0KICAgICAgIGF1dGhlbnRpY2F0aW9uU2NoZW1lcyBh
dHRyaWJ1dGUgcHVibGljbHkgYWNjZXNzaWJsZSB3aXRob3V0IHByaW9yCiAgICAgICBhdXRoZW50
aWNhdGlvbi4gIFJFUVVJUkVELgogCisKKworCisKKworCitNb3J0aW1vcmUsIGV0IGFsLiAgICAg
ICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAxN10KKwwKK0lu
dGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAg
Tm92ZW1iZXIgMjAxMgorCisKICAgICAgIG5hbWUgIFRoZSBjb21tb24gYXV0aGVudGljYXRpb24g
c2NoZW1lIG5hbWU7IGUuZy4sIEhUVFAgQmFzaWMuCiAgICAgICAgICBSRVFVSVJFRC4KIApAQCAt
OTQ1LDE0ICs5ODUsNiBAQA0KICAgICAgIGFwcGxpY2FibGUgU2VydmljZSBQcm92aWRlcnMgTVVT
VCBzcGVjaWZ5IHRoZSBkZXNjcmlwdGlvbgogICAgICAgc3BlY2lmaWVkIGluIHRoZSBjb3JlIHNj
aGVtYSBzcGVjaWZpY2F0aW9uLgogCi0KLQotCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBF
eHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAxN10KLQwKLUludGVybmV0
LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1i
ZXIgMjAxMgotCi0KICAgIHNjaGVtYSAgVGhlIFJlc291cmNlJ3MgYXNzb2NpYXRlZCBzY2hlbWEg
VVJJOyBlLmcuLAogICAgICAgdXJuOnNjaW06c2NoZW1hczpjb3JlOjEuMC4KIApAQCAtOTY2LDYg
Kzk5OCwxNyBAQA0KIAogICAgICAgbmFtZSAgVGhlIGF0dHJpYnV0ZSdzIG5hbWUuCiAKKworCisK
KworCisKK01vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAg
ICAgICAgICAgICAgIFtQYWdlIDE4XQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQt
c2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBOb3ZlbWJlciAyMDEyCisKKwogICAgICAgdHlw
ZSAgVGhlIGF0dHJpYnV0ZSdzIGRhdGEgdHlwZTsgZS5nLiwgU3RyaW5nLgogCiAgICAgICBtdWx0
aVZhbHVlZCAgQm9vbGVhbiB2YWx1ZSBpbmRpY2F0aW5nIHRoZSBhdHRyaWJ1dGUncyBwbHVyYWxp
dHkuCkBAIC05ODYsNiArMTAyOSwxMCBAQA0KICAgICAgIGNhc2VFeGFjdCAgQSBCb29sZWFuIHZh
bHVlIHRoYXQgc3BlY2lmaWVzIGlmIHRoZSBTdHJpbmcgYXR0cmlidXRlCiAgICAgICAgICBpcyBj
YXNlIHNlbnNpdGl2ZS4KIAorICAgICAgcmVmZXJlbmNlVHlwZXMgIFRoZSBuYW1lcyBvZiB0aGUg
UmVzb3VyY2VzIHRoYXQgbWF5IGJlIHJlZmVyZW5jZWQ7CisgICAgICAgICBlLmcuLCBVc2VyLiAg
VGhpcyBpcyBvbmx5IGFwcGxpY2FibGUgZm9yIGF0dHJpYnV0ZXMgdGhhdCBhcmUgb2YKKyAgICAg
ICAgIHRoZSAicmVmZXJlbmNlIiBkYXRhIHR5cGUuCisKICAgICAgICAgIFRoZSBmb2xsb3dpbmcg
bXVsdGktdmFsdWVkIGF0dHJpYnV0ZXMgYXJlIGRlZmluZWQuICBUaGVyZSBhcmUKICAgICAgICAg
IG5vIGNhbm9uaWNhbCB0eXBlIHZhbHVlcyBkZWZpbmVkIGFuZCB0aGUgcHJpbWFyeSB2YWx1ZSBz
ZXJ2ZXMKICAgICAgICAgIG5vIHVzZWZ1bCBwdXJwb3NlLgpAQCAtMTAwMSwyMyArMTA0OCwzMCBA
QA0KICAgICAgICAgICAgICAgIFdoZW4gYXBwbGljYWJsZSBTZXJ2aWNlIFByb3ZpZGVycyBNVVNU
IHNwZWNpZnkgdGhlCiAgICAgICAgICAgICAgICBkZXNjcmlwdGlvbiBzcGVjaWZpZWQgaW4gdGhl
IGNvcmUgc2NoZW1hIHNwZWNpZmljYXRpb24uCiAKKyAgICAgICAgICAgIHJlYWRPbmx5ICBBIEJv
b2xlYW4gdmFsdWUgdGhhdCBzcGVjaWZpZXMgaWYgdGhlIGF0dHJpYnV0ZSBpcworICAgICAgICAg
ICAgICAgbXV0YWJsZS4KIAorICAgICAgICAgICAgcmVxdWlyZWQgIEEgQm9vbGVhbiB2YWx1ZSB0
aGF0IHNwZWNpZmllcyBpZiB0aGUgYXR0cmlidXRlIGlzCisgICAgICAgICAgICAgICByZXF1aXJl
ZC4KIAogCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAg
ICAgICAgICAgICAgICBbUGFnZSAxOF0KKworCisKKworCitNb3J0aW1vcmUsIGV0IGFsLiAgICAg
ICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAxOV0KIAwKIElu
dGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAg
Tm92ZW1iZXIgMjAxMgogCiAKLSAgICAgICAgICAgIHJlYWRPbmx5ICBBIEJvb2xlYW4gdmFsdWUg
dGhhdCBzcGVjaWZpZXMgaWYgdGhlIGF0dHJpYnV0ZSBpcwotICAgICAgICAgICAgICAgbXV0YWJs
ZS4KLQotICAgICAgICAgICAgcmVxdWlyZWQgIEEgQm9vbGVhbiB2YWx1ZSB0aGF0IHNwZWNpZmll
cyBpZiB0aGUgYXR0cmlidXRlIGlzCi0gICAgICAgICAgICAgICByZXF1aXJlZC4KLQogICAgICAg
ICAgICAgY2FzZUV4YWN0ICBBIEJvb2xlYW4gdmFsdWUgdGhhdCBzcGVjaWZpZXMgaWYgdGhlIFN0
cmluZwogICAgICAgICAgICAgICAgYXR0cmlidXRlIGlzIGNhc2Ugc2Vuc2l0aXZlLgogCisgICAg
ICAgICAgICByZWZlcmVuY2VUeXBlcyAgVGhlIG5hbWVzIG9mIHRoZSBSZXNvdXJjZXMgdGhhdCBt
YXkgYmUKKyAgICAgICAgICAgICAgIHJlZmVyZW5jZWQ7IGUuZy4sIFVzZXIuICBUaGlzIGlzIG9u
bHkgYXBwbGljYWJsZSBmb3IKKyAgICAgICAgICAgICAgIGF0dHJpYnV0ZXMgdGhhdCBhcmUgb2Yg
dGhlICJyZWZlcmVuY2UiIGRhdGEgdHlwZS4KKwogICAgICAgICAgICAgY2Fub25pY2FsVmFsdWVz
ICBBIGNvbGxlY3Rpb24gb2YgY2Fub25pY2FsIHZhbHVlcy4gIFdoZW4KICAgICAgICAgICAgICAg
IGFwcGxpY2FibGUgU2VydmljZSBQcm92aWRlcnMgTVVTVCBzcGVjaWZ5IHRoZSBjYW5vbmljYWwK
ICAgICAgICAgICAgICAgIHR5cGVzIHNwZWNpZmllZCBpbiB0aGUgY29yZSBzY2hlbWEgc3BlY2lm
aWNhdGlvbjsKQEAgLTEwNTcsMTYgKzExMTEsMTYgQEANCiAgICAgImhvbm9yaWZpY1ByZWZpeCI6
ICJNcy4iLAogICAgICJob25vcmlmaWNTdWZmaXgiOiAiSUlJIgogICB9LAorICAiZGlzcGxheU5h
bWUiOiAiQmFicyBKZW5zZW4iLAorICAibmlja05hbWUiOiAiQmFicyIsCiAKIAogCi1Nb3J0aW1v
cmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBb
UGFnZSAxOV0KK01vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMg
ICAgICAgICAgICAgICAgIFtQYWdlIDIwXQogDAogSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJh
ZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBOb3ZlbWJlciAyMDEyCiAKIAotICAiZGlz
cGxheU5hbWUiOiAiQmFicyBKZW5zZW4iLAotICAibmlja05hbWUiOiAiQmFicyIsCiAgICJwcm9m
aWxlVXJsIjogImh0dHBzOi8vbG9naW4uZXhhbXBsZS5jb20vYmplbnNlbiIsCiAgICJlbWFpbHMi
OiBbCiAgICAgewpAQCAtMTExMywxNiArMTE2NywxNiBAQA0KICAgImltcyI6IFsKICAgICB7CiAg
ICAgICAidmFsdWUiOiAic29tZWFpbWhhbmRsZSIsCisgICAgICAidHlwZSI6ICJhaW0iCisgICAg
fQogCiAKIAotTW9ydGltb3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAg
ICAgICAgICAgICAgICAgW1BhZ2UgMjBdCitNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBp
cmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAyMV0KIAwKIEludGVybmV0LURy
YWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIg
MjAxMgogCiAKLSAgICAgICJ0eXBlIjogImFpbSIKLSAgICB9CiAgIF0sCiAgICJwaG90b3MiOiBb
CiAgICAgewpAQCAtMTE0MywxNiArMTE5NywxOSBAQA0KICAgInBhc3N3b3JkIjoidDFtZU1hJGhl
ZW4iLAogICAiZ3JvdXBzIjogWwogICAgIHsKLSAgICAgICJkaXNwbGF5IjogIlRvdXIgR3VpZGVz
IiwKLSAgICAgICJ2YWx1ZSI6ICIwMDMwMDAwMDAwNU4yWTZBQSIKKyAgICAgICJ2YWx1ZSI6ICJl
OWUzMGRiYS1mMDhmLTQxMDktODQ4Ni1kNWM2YTMzMTY2MGEiLAorICAgICAgIiRyZWYiOiAiaHR0
cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91cHMvZTllMzBkYmEtZjA4Zi00MTA5LTg0ODYtZDVjNmEz
MzE2NjBhIiwKKyAgICAgICJkaXNwbGF5IjogIlRvdXIgR3VpZGVzIgogICAgIH0sCiAgICAgewot
ICAgICAgImRpc3BsYXkiOiAiRW1wbG95ZWVzIiwKLSAgICAgICJ2YWx1ZSI6ICIwMDMwMDAwMDAw
NU4zNEg3OCIKKyAgICAgICJ2YWx1ZSI6ICJmYzM0OGFhOC0zODM1LTQwZWItYTIwYi1jNzI2ZTE1
YzU1YjUiLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91cHMvZmMz
NDhhYTgtMzgzNS00MGViLWEyMGItYzcyNmUxNWM1NWI1IiwKKyAgICAgICJkaXNwbGF5IjogIkVt
cGxveWVlcyIKICAgICB9LAogICAgIHsKLSAgICAgICJkaXNwbGF5IjogIlVTIEVtcGxveWVlcyIs
Ci0gICAgICAidmFsdWUiOiAiMDAzMDAwMDAwMDVOOThZVDEiCisgICAgICAidmFsdWUiOiAiNzFk
ZGFjZDItYThlNy00OWI4LWE1ZGItYWU1MGQwYTViZmQ3IiwKKyAgICAgICIkcmVmIjogImh0dHBz
Oi8vZXhhbXBsZS5jb20vdjEvR3JvdXBzLzcxZGRhY2QyLWE4ZTctNDliOC1hNWRiLWFlNTBkMGE1
YmZkNyIsCisgICAgICAiZGlzcGxheSI6ICJVUyBFbXBsb3llZXMiCiAgICAgfQogICBdLAogICAi
eDUwOUNlcnRpZmljYXRlcyI6IFsKQEAgLTExNjgsMTUgKzEyMjUsMTUgQEANCiAgICAgICAgICAg
ICAgICAgUFNpOHhPOFNMN0k3U0RoY0JWSmhxVnFyM0hnbGxFRzZVQ2xEZEhPN25rTHV3WHE4SGNJ
U0trYlQ1V0ZUVmZGWgogICAgICAgICAgICAgICAgIHppZFBsOEhaN0RoWGtaSVJ0SndCd2VxNGJ2
bTNoTTFPczdVUUgwNVpTNmNWRGd3ZUtOd2RMTHJUNTFpa1NRRzMKICAgICAgICAgICAgICAgICBE
WXJsK2Z0NzgxVVFSSXF4Z3dxQ2ZYRXVEaWluUGgwa2t2SWk1aml2VnUxWjlRaXdsWUVkUmJMSjR6
SlFCbURyCi0gICAgICAgICAgICAgICAgU0dUTVluNGxSYzJIZ0hPNERxQi9ibk1Wb3JIQjBDQzZB
VjFRb0ZLNEdQZTFMd0lEQVFBQm8zc3dlVEFKQmdOVgogCiAKIAotTW9ydGltb3JlLCBldCBhbC4g
ICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMjFdCitN
b3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAg
ICAgICBbUGFnZSAyMl0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29y
ZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKKyAgICAgICAgICAgICAgICBT
R1RNWW40bFJjMkhnSE80RHFCL2JuTVZvckhCMENDNkFWMVFvRks0R1BlMUx3SURBUUFCbzNzd2VU
QUpCZ05WCiAgICAgICAgICAgICAgICAgSFJNRUFqQUFNQ3dHQ1dDR1NBR0crRUlCRFFRZkZoMVBj
R1Z1VTFOTUlFZGxibVZ5WVhSbFpDQkRaWEowYVdacAogICAgICAgICAgICAgICAgIFkyRjBaVEFk
QmdOVkhRNEVGZ1FVOHBEMFUwdnNaSXNhQTE2bEw4RW44YngwRi9nd0h3WURWUjBqQkJnd0ZvQVUK
ICAgICAgICAgICAgICAgICBkR2VLaXRjYUY3Z256c053RHg3MDhrcWFWdDB3RFFZSktvWklodmNO
QVFFRkJRQURnWUVBQTgxU3NGbk9kWUp0CkBAIC0xMjI0LDE1ICsxMjgxLDE1IEBADQogICAgIHsK
ICAgICAgICJ2YWx1ZSI6ICJiYWJzQGplbnNlbi5vcmciLAogICAgICAgInR5cGUiOiAiaG9tZSIK
LSAgICB9CiAKIAogCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAy
MDEzICAgICAgICAgICAgICAgICBbUGFnZSAyMl0KK01vcnRpbW9yZSwgZXQgYWwuICAgICAgICAg
IEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDIzXQogDAogSW50ZXJu
ZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBOb3Zl
bWJlciAyMDEyCiAKIAorICAgIH0KICAgXSwKICAgImFkZHJlc3NlcyI6IFsKICAgICB7CkBAIC0x
MjgwLDE1ICsxMzM3LDE1IEBADQogICAgICAgInZhbHVlIjogImh0dHBzOi8vcGhvdG9zLmV4YW1w
bGUuY29tL3Byb2ZpbGVwaG90by83MjkzMDAwMDAwMENjbmUvVCIsCiAgICAgICAidHlwZSI6ICJ0
aHVtYm5haWwiCiAgICAgfQotICBdLAogCiAKIAotTW9ydGltb3JlLCBldCBhbC4gICAgICAgICAg
RXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMjNdCitNb3J0aW1vcmUs
IGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFn
ZSAyNF0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEt
MDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKKyAgXSwKICAgInVzZXJUeXBlIjogIkVtcGxv
eWVlIiwKICAgInRpdGxlIjogIlRvdXIgR3VpZGUiLAogICAicHJlZmVycmVkTGFuZ3VhZ2UiOiJl
bl9VUyIsCkBAIC0xMjk5LDE0ICsxMzU2LDE3IEBADQogICAiZ3JvdXBzIjogWwogICAgIHsKICAg
ICAgICJ2YWx1ZSI6ICJlOWUzMGRiYS1mMDhmLTQxMDktODQ4Ni1kNWM2YTMzMTY2MGEiLAorICAg
ICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91cHMvZTllMzBkYmEtZjA4Zi00
MTA5LTg0ODYtZDVjNmEzMzE2NjBhIiwKICAgICAgICJkaXNwbGF5IjogIlRvdXIgR3VpZGVzIgog
ICAgIH0sCiAgICAgewogICAgICAgInZhbHVlIjogImZjMzQ4YWE4LTM4MzUtNDBlYi1hMjBiLWM3
MjZlMTVjNTViNSIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL0dyb3Vw
cy9mYzM0OGFhOC0zODM1LTQwZWItYTIwYi1jNzI2ZTE1YzU1YjUiLAogICAgICAgImRpc3BsYXki
OiAiRW1wbG95ZWVzIgogICAgIH0sCiAgICAgewogICAgICAgInZhbHVlIjogIjcxZGRhY2QyLWE4
ZTctNDliOC1hNWRiLWFlNTBkMGE1YmZkNyIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1w
bGUuY29tL3YxL0dyb3Vwcy83MWRkYWNkMi1hOGU3LTQ5YjgtYTVkYi1hZTUwZDBhNWJmZDciLAog
ICAgICAgImRpc3BsYXkiOiAiVVMgRW1wbG95ZWVzIgogICAgIH0KICAgXSwKQEAgLTEzMzMsMjEg
KzEzOTMsMjIgQEANCiAgICAgfQogICBdLAogICAidXJuOnNjaW06c2NoZW1hczpleHRlbnNpb246
ZW50ZXJwcmlzZToxLjAiOiB7Ci0gICAgImVtcGxveWVlTnVtYmVyIjogIjcwMTk4NCIsCi0gICAg
ImNvc3RDZW50ZXIiOiAiNDEzMCIsCi0gICAgIm9yZ2FuaXphdGlvbiI6ICJVbml2ZXJzYWwgU3R1
ZGlvcyIsCi0gICAgImRpdmlzaW9uIjogIlRoZW1lIFBhcmsiLAogCiAKIAotTW9ydGltb3JlLCBl
dCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2Ug
MjRdCitNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAg
ICAgICAgICAgICBbUGFnZSAyNV0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNj
aW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKKyAgICAiZW1wbG95
ZWVOdW1iZXIiOiAiNzAxOTg0IiwKKyAgICAiY29zdENlbnRlciI6ICI0MTMwIiwKKyAgICAib3Jn
YW5pemF0aW9uIjogIlVuaXZlcnNhbCBTdHVkaW9zIiwKKyAgICAiZGl2aXNpb24iOiAiVGhlbWUg
UGFyayIsCiAgICAgImRlcGFydG1lbnQiOiAiVG91ciBPcGVyYXRpb25zIiwKICAgICAibWFuYWdl
ciI6IHsKICAgICAgICJtYW5hZ2VySWQiOiAiMjYxMTg5MTUtNjA5MC00NjEwLTg3ZTQtNDlkOGNh
OWY4MDhkIiwKKyAgICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20vdjEvVXNlcnMvMjYx
MTg5MTUtNjA5MC00NjEwLTg3ZTQtNDlkOGNhOWY4MDhkIiwKICAgICAgICJkaXNwbGF5TmFtZSI6
ICJKb2huIFNtaXRoIgogICAgIH0KICAgfSwKQEAgLTEzNjYsNDEgKzE0MjcsNDEgQEANCiAgICBp
biBKU09OIGZvcm1hdC4KIAogCi0gICB7Ci0gICAgICJzY2hlbWFzIjogWyJ1cm46c2NpbTpzY2hl
bWFzOmNvcmU6MS4wIl0sCi0gICAgICJpZCI6ICJlOWUzMGRiYS1mMDhmLTQxMDktODQ4Ni1kNWM2
YTMzMTY2MGEiLAotICAgICAiZGlzcGxheU5hbWUiOiAiVG91ciBHdWlkZXMiLAotICAgICAibWVt
YmVycyI6IFsKLSAgICAgICB7Ci0gICAgICAgICAidmFsdWUiOiAiMjgxOWMyMjMtN2Y3Ni00NTNh
LTkxOWQtNDEzODYxOTA0NjQ2IiwKLSAgICAgICAgICJkaXNwbGF5IjogIkJhYnMgSmVuc2VuIgot
ICAgICAgIH0sCi0gICAgICAgewotICAgICAgICAgInZhbHVlIjogIjkwMmMyNDZiLTYyNDUtNDE5
MC04ZTA1LTAwODE2YmU3MzQ0YSIsCi0gICAgICAgICAiZGlzcGxheSI6ICJNYW5keSBQZXBwZXJp
ZGdlIgotICAgICAgIH0KLSAgICAgXQotICAgfQoreworICAic2NoZW1hcyI6IFsidXJuOnNjaW06
c2NoZW1hczpjb3JlOjEuMCJdLAorICAiaWQiOiAiZTllMzBkYmEtZjA4Zi00MTA5LTg0ODYtZDVj
NmEzMzE2NjBhIiwKKyAgImRpc3BsYXlOYW1lIjogIlRvdXIgR3VpZGVzIiwKKyAgIm1lbWJlcnMi
OiBbCisgICAgeworICAgICAgInZhbHVlIjogIjI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2
MTkwNDY0NiIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL1VzZXJzLzI4
MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NiIsCisgICAgICAiZGlzcGxheSI6ICJC
YWJzIEplbnNlbiIKKyAgICB9LAorICAgIHsKKyAgICAgICJ2YWx1ZSI6ICI5MDJjMjQ2Yi02MjQ1
LTQxOTAtOGUwNS0wMDgxNmJlNzM0NGEiLAorICAgICAgIiRyZWYiOiAiaHR0cHM6Ly9leGFtcGxl
LmNvbS92MS9Vc2Vycy85MDJjMjQ2Yi02MjQ1LTQxOTAtOGUwNS0wMDgxNmJlNzM0NGEiLAorICAg
ICAgImRpc3BsYXkiOiAiTWFuZHkgUGVwcGVyaWRnZSIKKyAgICB9CisgIF0KK30KIAogCi0xMS41
LiAgU2VydmljZSBQcm92aWRlciBDb25maWd1cmF0aW9uIFJlcHJlc2VudGF0aW9uCiAKLSAgIFRo
ZSBmb2xsb3dpbmcgaXMgYSBub24tbm9ybWF0aXZlIGV4YW1wbGUgb2YgdGhlIFNDSU0gU2Vydmlj
ZSBQcm92aWRlcgotICAgQ29uZmlndXJhdGlvbiByZXByZXNlbnRhdGlvbiBpbiBKU09OIGZvcm1h
dC4KIAogCiAKIAogCitNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAy
MDEzICAgICAgICAgICAgICAgICBbUGFnZSAyNl0KKwwKK0ludGVybmV0LURyYWZ0ICAgICAgICAg
IGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKKzEx
LjUuICBTZXJ2aWNlIFByb3ZpZGVyIENvbmZpZ3VyYXRpb24gUmVwcmVzZW50YXRpb24KIAorICAg
VGhlIGZvbGxvd2luZyBpcyBhIG5vbi1ub3JtYXRpdmUgZXhhbXBsZSBvZiB0aGUgU0NJTSBTZXJ2
aWNlIFByb3ZpZGVyCisgICBDb25maWd1cmF0aW9uIHJlcHJlc2VudGF0aW9uIGluIEpTT04gZm9y
bWF0LgogCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAg
ICAgICAgICAgICAgICBbUGFnZSAyNV0KLQwKLUludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0
LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgotCi0KIHsKICAgInNj
aGVtYXMiOiBbInVybjpzY2ltOnNjaGVtYXM6Y29yZToxLjAiXSwKICAgImRvY3VtZW50YXRpb25V
cmwiOiJodHRwOi8vZXhhbXBsZS5jb20vaGVscC9zY2ltLmh0bWwiLApAQCAtMTQ0NywxMiArMTUw
OCw3IEBADQogCiAKIAotCi0KLQotCi0KLU1vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGly
ZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDI2XQorTW9ydGltb3JlLCBldCBh
bC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMjdd
CiAMCiBJbnRlcm5ldC1EcmFmdCAgICAgICAgICBkcmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAxICAg
ICAgICAgIE5vdmVtYmVyIDIwMTIKIApAQCAtMTUwOCw3ICsxNTY0LDcgQEANCiAKIAogCi1Nb3J0
aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAg
ICBbUGFnZSAyN10KK01vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIw
MTMgICAgICAgICAgICAgICAgIFtQYWdlIDI4XQogDAogSW50ZXJuZXQtRHJhZnQgICAgICAgICAg
ZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAgICAgICBOb3ZlbWJlciAyMDEyCiAKQEAgLTE1
NjQsNyArMTYyMCw3IEBADQogCiAKIAotTW9ydGltb3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJl
cyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMjhdCitNb3J0aW1vcmUsIGV0IGFs
LiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAyOV0K
IAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRyYWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAg
ICAgICAgTm92ZW1iZXIgMjAxMgogCkBAIC0xNjIwLDcgKzE2NzYsNyBAQA0KIAogCiAKLU1vcnRp
bW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAg
IFtQYWdlIDI5XQorTW9ydGltb3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAx
MyAgICAgICAgICAgICAgICAgW1BhZ2UgMzBdCiAMCiBJbnRlcm5ldC1EcmFmdCAgICAgICAgICBk
cmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAxICAgICAgICAgIE5vdmVtYmVyIDIwMTIKIApAQCAtMTY3
Niw3ICsxNzMyLDcgQEANCiAKIAogCi1Nb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVz
IE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAzMF0KK01vcnRpbW9yZSwgZXQgYWwu
ICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDMxXQog
DAogSW50ZXJuZXQtRHJhZnQgICAgICAgICAgZHJhZnQtc2NpbS1jb3JlLXNjaGVtYS0wMSAgICAg
ICAgICBOb3ZlbWJlciAyMDEyCiAKQEAgLTE3MzIsNyArMTc4OCw3IEBADQogCiAKIAotTW9ydGlt
b3JlLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAg
W1BhZ2UgMzFdCitNb3J0aW1vcmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEz
ICAgICAgICAgICAgICAgICBbUGFnZSAzMl0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgIGRy
YWZ0LXNjaW0tY29yZS1zY2hlbWEtMDEgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCkBAIC0xNzg4
LDcgKzE4NDQsNyBAQA0KIAogCiAKLU1vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg
TWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDMyXQorTW9ydGltb3JlLCBldCBhbC4g
ICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMzNdCiAM
CiBJbnRlcm5ldC1EcmFmdCAgICAgICAgICBkcmFmdC1zY2ltLWNvcmUtc2NoZW1hLTAxICAgICAg
ICAgIE5vdmVtYmVyIDIwMTIKIApAQCAtMTg0NCw1ICsxOTAwLDUgQEANCiAKIAogCi1Nb3J0aW1v
cmUsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBb
UGFnZSAzM10KK01vcnRpbW9yZSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMg
ICAgICAgICAgICAgICAgIFtQYWdlIDM0XQogDApJbmRleDogZHJhZnQtaWV0Zi1zY2ltLWFwaS0w
MS50eHQNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT0NCi0tLSBkcmFmdC1pZXRmLXNjaW0tYXBpLTAxLnR4dAkocmV2aXNp
b24gMjA3KQ0KKysrIGRyYWZ0LWlldGYtc2NpbS1hcGktMDEudHh0CSh3b3JraW5nIGNvcHkpDQpA
QCAtMTAwOSwyMiArMTAwOSwyMyBAQA0KIEludGVybmV0LURyYWZ0ICAgICAgICAgICAgICBkcmFm
dC1zY2ltLWFwaS0wMSAgICAgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKLSAgIFBBVENIIC9H
cm91cHMvYWNiZjNhZTctODQ2My00NjkyLWI0ZmQtOWI0ZGEzZjkwOGNlCi0gICBIb3N0OiBleGFt
cGxlLmNvbQotICAgQWNjZXB0OiBhcHBsaWNhdGlvbi9qc29uCi0gICBDb250ZW50LVR5cGU6IGFw
cGxpY2F0aW9uL2pzb24KLSAgIEF1dGhvcml6YXRpb246IEJlYXJlciBoNDgwZGpzOTNoZDgKLSAg
IElmLU1hdGNoOiBXLyJhMzMwYmM1NGYwNjcxYzkiCitQQVRDSCAvR3JvdXBzL2FjYmYzYWU3LTg0
NjMtNDY5Mi1iNGZkLTliNGRhM2Y5MDhjZQorSG9zdDogZXhhbXBsZS5jb20KK0FjY2VwdDogYXBw
bGljYXRpb24vanNvbgorQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uCitBdXRob3JpemF0
aW9uOiBCZWFyZXIgaDQ4MGRqczkzaGQ4CitJZi1NYXRjaDogVy8iYTMzMGJjNTRmMDY3MWM5Igog
Ci0gICB7Ci0gICAgICJzY2hlbWFzIjogWyJ1cm46c2NpbTpzY2hlbWFzOmNvcmU6MS4wIl0sCi0g
ICAgICJtZW1iZXJzIjogWwotICAgICAgIHsKLSAgICAgICAgICJkaXNwbGF5IjogIkJhYnMgSmVu
c2VuIiwKLSAgICAgICAgICJ2YWx1ZSI6ICIyODE5YzIyMy03Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5
MDQ2NDYiCi0gICAgICAgfQotICAgICBdCi0gICB9Cit7CisgICJzY2hlbWFzIjogWyJ1cm46c2Np
bTpzY2hlbWFzOmNvcmU6MS4wIl0sCisgICJtZW1iZXJzIjogWworICAgIHsKKyAgICAgICJkaXNw
bGF5IjogIkJhYnMgSmVuc2VuIiwKKyAgICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20v
djEvVXNlcnMvMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2IiwKKyAgICAgICJ2
YWx1ZSI6ICIyODE5YzIyMy03Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5MDQ2NDYiCisgICAgfQorICBd
Cit9CiAKICAgIFRoZSAiZGlzcGxheSIgU3ViLUF0dHJpYnV0ZSBpbiB0aGlzIHJlcXVlc3QgaXMg
b3B0aW9uYWwgc2luY2UgdGhlCiAgICB2YWx1ZSBhdHRyaWJ1dGUgdW5pcXVlbHkgaWRlbnRpZmll
cyB0aGUgdXNlciB0byBiZSBhZGRlZC4gIElmIHRoZQpAQCAtMTA1OSwyOSArMTA2MCwyOSBAQA0K
IAogCiAKLQogRHJha2UsIGV0IGFsLiAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAg
ICAgICAgICAgICAgICAgW1BhZ2UgMTldCiAMCiBJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAg
ZHJhZnQtc2NpbS1hcGktMDEgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMTIKIAogCi0gICBQQVRD
SCAvR3JvdXBzL2FjYmYzYWU3LTg0NjMtNDY5Mi1iNGZkLTliNGRhM2Y5MDhjZQotICAgSG9zdDog
ZXhhbXBsZS5jb20KLSAgIEFjY2VwdDogYXBwbGljYXRpb24vanNvbgotICAgQ29udGVudC1UeXBl
OiBhcHBsaWNhdGlvbi9qc29uCi0gICBBdXRob3JpemF0aW9uOiBCZWFyZXIgaDQ4MGRqczkzaGQ4
Ci0gICBJZi1NYXRjaDogVy8iYTMzMGJjNTRmMDY3MWM5IgorUEFUQ0ggL0dyb3Vwcy9hY2JmM2Fl
Ny04NDYzLTQ2OTItYjRmZC05YjRkYTNmOTA4Y2UKK0hvc3Q6IGV4YW1wbGUuY29tCitBY2NlcHQ6
IGFwcGxpY2F0aW9uL2pzb24KK0NvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vanNvbgorQXV0aG9y
aXphdGlvbjogQmVhcmVyIGg0ODBkanM5M2hkOAorSWYtTWF0Y2g6IFcvImEzMzBiYzU0ZjA2NzFj
OSIKIAotICAgewotICAgICAic2NoZW1hcyI6IFsidXJuOnNjaW06c2NoZW1hczpjb3JlOjEuMCJd
LAotICAgICAibWVtYmVycyI6IFsKLSAgICAgICB7Ci0gICAgICAgICAiZGlzcGxheSI6ICJCYWJz
IEplbnNlbiIsCi0gICAgICAgICAidmFsdWUiOiAiMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEz
ODYxOTA0NjQ2IgotICAgICAgICAgIm9wZXJhdGlvbiI6ICJkZWxldGUiCi0gICAgICAgfQotICAg
ICBdCi0gICB9Cit7CisgICJzY2hlbWFzIjogWyJ1cm46c2NpbTpzY2hlbWFzOmNvcmU6MS4wIl0s
CisgICJtZW1iZXJzIjogWworICAgIHsKKyAgICAgICJkaXNwbGF5IjogIkJhYnMgSmVuc2VuIiwK
KyAgICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20vdjEvVXNlcnMvMjgxOWMyMjMtN2Y3
Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2IiwKKyAgICAgICJ2YWx1ZSI6ICIyODE5YzIyMy03Zjc2
LTQ1M2EtOTE5ZC00MTM4NjE5MDQ2NDYiCisgICAgICAib3BlcmF0aW9uIjogImRlbGV0ZSIKKyAg
ICB9CisgIF0KK30KIAogICAgVGhlIGZvbGxvd2luZyBleGFtcGxlIHNob3dzIGhvdyB0byByZW1v
dmUgYWxsIG1lbWJlcnMgZnJvbSBhIGdyb3VwOgogCkBAIC0xMTE1LDM3ICsxMTE2LDM4IEBADQog
CiAKIAotCiBEcmFrZSwgZXQgYWwuICAgICAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAg
ICAgICAgICAgICAgICBbUGFnZSAyMF0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgICAgICBk
cmFmdC1zY2ltLWFwaS0wMSAgICAgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKLSAgIFBBVENI
IC9Hcm91cHMvYWNiZjNhZTctODQ2My00NjkyLWI0ZmQtOWI0ZGEzZjkwOGNlCi0gICBIb3N0OiBl
eGFtcGxlLmNvbQotICAgQWNjZXB0OiBhcHBsaWNhdGlvbi9qc29uCi0gICBDb250ZW50LVR5cGU6
IGFwcGxpY2F0aW9uL2pzb24KLSAgIEF1dGhvcml6YXRpb246IEJlYXJlciBoNDgwZGpzOTNoZDgK
LSAgIElmLU1hdGNoOiBXLyJhMzMwYmM1NGYwNjcxYzkiCitQQVRDSCAvR3JvdXBzL2FjYmYzYWU3
LTg0NjMtNDY5Mi1iNGZkLTliNGRhM2Y5MDhjZQorSG9zdDogZXhhbXBsZS5jb20KK0FjY2VwdDog
YXBwbGljYXRpb24vanNvbgorQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uCitBdXRob3Jp
emF0aW9uOiBCZWFyZXIgaDQ4MGRqczkzaGQ4CitJZi1NYXRjaDogVy8iYTMzMGJjNTRmMDY3MWM5
IgogCi0gICB7Ci0gICAgICJzY2hlbWFzIjogWyJ1cm46c2NpbTpzY2hlbWFzOmNvcmU6MS4wIl0s
Ci0gICAgICJtZXRhIjogewotICAgICAgICJhdHRyaWJ1dGVzIjogWwotICAgICAgICAgIm1lbWJl
cnMiCi0gICAgICAgXQotICAgICB9LAotICAgICAibWVtYmVycyI6IFsKLSAgICAgICB7Ci0gICAg
ICAgICAiZGlzcGxheSI6ICJCYWJzIEplbnNlbiIsCi0gICAgICAgICAidmFsdWUiOiAiMjgxOWMy
MjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2IgotICAgICAgIH0sCi0gICAgICAgewotICAg
ICAgICAgImRpc3BsYXkiOiAiSmFtZXMgU21pdGgiLAotICAgICAgICAgInZhbHVlIjogIjA4ZTFk
MDVkLTEyMWMtNDU2MS04Yjk2LTQ3M2Q5M2RmOTIxMCIKLSAgICAgICB9Ci0gICAgIF0KLSAgIH0K
K3sKKyAgInNjaGVtYXMiOiBbInVybjpzY2ltOnNjaGVtYXM6Y29yZToxLjAiXSwKKyAgIm1ldGEi
OiB7CisgICAgImF0dHJpYnV0ZXMiOiBbCisgICAgICAibWVtYmVycyIKKyAgICBdCisgIH0sCisg
ICJtZW1iZXJzIjogWworICAgIHsKKyAgICAgICJkaXNwbGF5IjogIkJhYnMgSmVuc2VuIiwKKyAg
ICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBsZS5jb20vdjEvVXNlcnMvMjgxOWMyMjMtN2Y3Ni00
NTNhLTkxOWQtNDEzODYxOTA0NjQ2IiwKKyAgICAgICJ2YWx1ZSI6ICIyODE5YzIyMy03Zjc2LTQ1
M2EtOTE5ZC00MTM4NjE5MDQ2NDYiCisgICAgfSwKKyAgICB7CisgICAgICAiZGlzcGxheSI6ICJK
YW1lcyBTbWl0aCIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL1VzZXJz
LzA4ZTFkMDVkLTEyMWMtNDU2MS04Yjk2LTQ3M2Q5M2RmOTIxMCIsCisgICAgICAidmFsdWUiOiAi
MDhlMWQwNWQtMTIxYy00NTYxLThiOTYtNDczZDkzZGY5MjEwIgorICAgIH0KKyAgXQorfQogCiAg
ICBUaGUgZm9sbG93aW5nIGV4YW1wbGUgc2hvd3MgaG93IHRvIGFkZCBhIG1lbWJlciB0byBhbmQg
cmVtb3ZlIGEKICAgIG1lbWJlciBmcm9tIGEgR3JvdXAgaW4gYSBzaW5nbGUgcmVxdWVzdDoKQEAg
LTExNzAsMzQgKzExNzIsMzQgQEANCiAKIAogCi0KLQogRHJha2UsIGV0IGFsLiAgICAgICAgICAg
ICAgRXhwaXJlcyBNYXkgNSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMjFdCiAMCiBJbnRl
cm5ldC1EcmFmdCAgICAgICAgICAgICAgZHJhZnQtc2NpbS1hcGktMDEgICAgICAgICAgICAgIE5v
dmVtYmVyIDIwMTIKIAogCi0gICBQQVRDSCAvR3JvdXBzL2FjYmYzYWU3LTg0NjMtNDY5Mi1iNGZk
LTliNGRhM2Y5MDhjZQotICAgSG9zdDogZXhhbXBsZS5jb20KLSAgIEFjY2VwdDogYXBwbGljYXRp
b24vanNvbgotICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uCi0gICBBdXRob3JpemF0
aW9uOiBCZWFyZXIgaDQ4MGRqczkzaGQ4Ci0gICBJZi1NYXRjaDogVy8iYTMzMGJjNTRmMDY3MWM5
IgorUEFUQ0ggL0dyb3Vwcy9hY2JmM2FlNy04NDYzLTQ2OTItYjRmZC05YjRkYTNmOTA4Y2UKK0hv
c3Q6IGV4YW1wbGUuY29tCitBY2NlcHQ6IGFwcGxpY2F0aW9uL2pzb24KK0NvbnRlbnQtVHlwZTog
YXBwbGljYXRpb24vanNvbgorQXV0aG9yaXphdGlvbjogQmVhcmVyIGg0ODBkanM5M2hkOAorSWYt
TWF0Y2g6IFcvImEzMzBiYzU0ZjA2NzFjOSIKIAotICAgewotICAgICAic2NoZW1hcyI6IFsidXJu
OnNjaW06c2NoZW1hczpjb3JlOjEuMCJdLAotICAgICAibWVtYmVycyI6IFsKLSAgICAgICB7Ci0g
ICAgICAgICAiZGlzcGxheSI6ICJCYWJzIEplbnNlbiIsCi0gICAgICAgICAidmFsdWUiOiAiMjgx
OWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2IgotICAgICAgICAgIm9wZXJhdGlvbiI6
ICJkZWxldGUiCi0gICAgICAgfSwKLSAgICAgICB7Ci0gICAgICAgICAiZGlzcGxheSI6ICJKYW1l
cyBTbWl0aCIsCi0gICAgICAgICAidmFsdWUiOiAiMDhlMWQwNWQtMTIxYy00NTYxLThiOTYtNDcz
ZDkzZGY5MjEwIgotICAgICAgIH0KLSAgICAgXQotICAgfQoreworICAic2NoZW1hcyI6IFsidXJu
OnNjaW06c2NoZW1hczpjb3JlOjEuMCJdLAorICAibWVtYmVycyI6IFsKKyAgICB7CisgICAgICAi
ZGlzcGxheSI6ICJCYWJzIEplbnNlbiIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUu
Y29tL3YxL1VzZXJzLzI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NiIsCisgICAg
ICAidmFsdWUiOiAiMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2IgorICAgICAg
Im9wZXJhdGlvbiI6ICJkZWxldGUiCisgICAgfSwKKyAgICB7CisgICAgICAiZGlzcGxheSI6ICJK
YW1lcyBTbWl0aCIsCisgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1wbGUuY29tL3YxL1VzZXJz
LzA4ZTFkMDVkLTEyMWMtNDU2MS04Yjk2LTQ3M2Q5M2RmOTIxMCIsCisgICAgICAidmFsdWUiOiAi
MDhlMWQwNWQtMTIxYy00NTYxLThiOTYtNDczZDkzZGY5MjEwIgorICAgIH0KKyAgXQorfQogCiAg
ICBUaGUgZm9sbG93aW5nIGV4YW1wbGUgc2hvd3MgaG93IHRvIGNoYW5nZSBhIFVzZXIncyBwcmlt
YXJ5IGVtYWlsLiAgSWYKICAgIHRoZSBVc2VyIGFscmVhZHkgaGFzIHRoZSBlbWFpbCBhZGRyZXNz
LCBpdCBpcyBtYWRlIHRoZSBwcmltYXJ5CkBAIC0xMjIzLDggKzEyMjUsNiBAQA0KICAgIH0KIAog
ICAgVGhlIGZvbGxvd2luZyBleGFtcGxlIHNob3dzIGhvdyB0byBjaGFuZ2UgYSBVc2VyJ3MgYWRk
cmVzcy4gIFNpbmNlCi0gICBhZGRyZXNzIGRvZXMgbm90IGhhdmUgYSB2YWx1ZSBTdWItQXR0cmli
dXRlLCB0aGUgZXhpc3RpbmcgYWRkcmVzcwotICAgbXVzdCBiZSByZW1vdmVkIGFuZCB0aGUgbW9k
aWZpZWQgYWRkcmVzcyBhZGRlZC4KIAogCiAKQEAgLTEyMzMsNiArMTIzMyw5IEBADQogSW50ZXJu
ZXQtRHJhZnQgICAgICAgICAgICAgIGRyYWZ0LXNjaW0tYXBpLTAxICAgICAgICAgICAgICBOb3Zl
bWJlciAyMDEyCiAKIAorICAgYWRkcmVzcyBkb2VzIG5vdCBoYXZlIGEgdmFsdWUgU3ViLUF0dHJp
YnV0ZSwgdGhlIGV4aXN0aW5nIGFkZHJlc3MKKyAgIG11c3QgYmUgcmVtb3ZlZCBhbmQgdGhlIG1v
ZGlmaWVkIGFkZHJlc3MgYWRkZWQuCisKICAgUEFUQ0ggL1VzZXJzLzI4MTljMjIzLTdmNzYtNDUz
YS05MTlkLTQxMzg2MTkwNDY0NgogICBIb3N0OiBleGFtcGxlLmNvbQogICBBY2NlcHQ6IGFwcGxp
Y2F0aW9uL2pzb24KQEAgLTEyNjksNiArMTI3MiwyMyBAQA0KIAogICAgVGhlIGZvbGxvd2luZyBl
eGFtcGxlIHNob3dzIGhvdyB0byBjaGFuZ2UgYSBVc2VyJ3Mgbmlja25hbWU6CiAKKworCisKKwor
CisKKworCisKKworCisKK0RyYWtlLCBldCBhbC4gICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDUs
IDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDIzXQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAg
ICAgICAgIGRyYWZ0LXNjaW0tYXBpLTAxICAgICAgICAgICAgICBOb3ZlbWJlciAyMDEyCisKKwog
ICAgUEFUQ0ggL1VzZXJzLzI4MTljMjIzLTdmNzYtNDUzYS05MTlkLTQxMzg2MTkwNDY0NgogICAg
SG9zdDogZXhhbXBsZS5jb20KICAgIEFjY2VwdDogYXBwbGljYXRpb24vanNvbgpAQCAtMTI4MSwx
NCArMTMwMSw2IEBADQogICAgICAibmlja05hbWUiOiAiQmFyYmllIgogICAgfQogCi0KLQotCi1E
cmFrZSwgZXQgYWwuICAgICAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAg
ICAgICBbUGFnZSAyM10KLQwKLUludGVybmV0LURyYWZ0ICAgICAgICAgICAgICBkcmFmdC1zY2lt
LWFwaS0wMSAgICAgICAgICAgICAgTm92ZW1iZXIgMjAxMgotCi0KICAgIFRoZSBmb2xsb3dpbmcg
ZXhhbXBsZSBzaG93cyBob3cgdG8gcmVtb3ZlIGEgVXNlcidzIG5pY2tuYW1lOgogCiAgICBQQVRD
SCAvVXNlcnMvMjgxOWMyMjMtN2Y3Ni00NTNhLTkxOWQtNDEzODYxOTA0NjQ2CkBAIC0xMzI1LDI2
ICsxMzM3LDE5IEBADQogICAgICAgICJmb3JtYXR0ZWQiOiAiTXMuIEJhcmJhcmEgSiBKZW5zZW4g
SUlJIiwKICAgICAgICAiZmFtaWx5TmFtZSI6ICJKZW5zZW4iCiAgICAgIH0KLSAgIH0KIAotICAg
VGhlIGZvbGxvd2luZyBleGFtcGxlIHNob3dzIGhvdyB0byByZW1vdmUgYSBjb21wbGV4IFN1Yi1B
dHRyaWJ1dGUgYW5kCi0gICBhbiBleHRlbmRlZCBzY2hlbWEgYXR0cmlidXRlIGZyb20gYSBVc2Vy
LgogCiAKLQotCi0KLQotCi0KLQotCi0KIERyYWtlLCBldCBhbC4gICAgICAgICAgICAgIEV4cGly
ZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdlIDI0XQogDAogSW50ZXJuZXQtRHJh
ZnQgICAgICAgICAgICAgIGRyYWZ0LXNjaW0tYXBpLTAxICAgICAgICAgICAgICBOb3ZlbWJlciAy
MDEyCiAKIAorICAgfQorCisgICBUaGUgZm9sbG93aW5nIGV4YW1wbGUgc2hvd3MgaG93IHRvIHJl
bW92ZSBhIGNvbXBsZXggU3ViLUF0dHJpYnV0ZSBhbmQKKyAgIGFuIGV4dGVuZGVkIHNjaGVtYSBh
dHRyaWJ1dGUgZnJvbSBhIFVzZXIuCisKICAgIFBBVENIIC9Vc2Vycy8yODE5YzIyMy03Zjc2LTQ1
M2EtOTE5ZC00MTM4NjE5MDQ2NDYKICAgIEhvc3Q6IGV4YW1wbGUuY29tCiAgICBBY2NlcHQ6IGFw
cGxpY2F0aW9uL2pzb24KQEAgLTEzOTAsMTcgKzEzOTUsMTggQEANCiAKIAogCisKK0RyYWtlLCBl
dCBhbC4gICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAgICAgICAgICAgIFtQ
YWdlIDI1XQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgIGRyYWZ0LXNjaW0tYXBpLTAx
ICAgICAgICAgICAgICBOb3ZlbWJlciAyMDEyCisKKwogICAgR0VUIC9Vc2Vycy8yODE5YzIyMy03
Zjc2LTQ1M2EtOTE5ZC00MTM4NjE5MDQ2NDYKICAgIEhvc3Q6IGV4YW1wbGUuY29tCiAgICBBdXRo
b3JpemF0aW9uOiBCZWFyZXIgaDQ4MGRqczkzaGQ4CiAKIAogCi1EcmFrZSwgZXQgYWwuICAgICAg
ICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAyNV0KLQwK
LUludGVybmV0LURyYWZ0ICAgICAgICAgICAgICBkcmFmdC1zY2ltLWFwaS0wMSAgICAgICAgICAg
ICAgTm92ZW1iZXIgMjAxMgotCi0KIEhUVFAvMS4xIDQwNCBOT1QgRk9VTkQKIAogewpAQCAtMTQ0
MywyMCArMTQ0OSwyMCBAQA0KICAgICAgICAgIGJ1bGtJZCBzZXJ2ZXMgYXMgYSBzdXJyb2dhdGUg
UmVzb3VyY2UgaWQgZW5hYmxpbmcgQ29uc3VtZXJzIHRvCiAgICAgICAgICB1bmlxdWVseSBpZGVu
dGlmeSBuZXdseSBjcmVhdGVkIFJlc291cmNlcyBpbiB0aGUgUmVzcG9uc2UgYW5kCiAgICAgICAg
ICBjcm9zcyByZWZlcmVuY2UgbmV3IFJlc291cmNlcyBpbiBhbmQgYWNyb3NzIG9wZXJhdGlvbnMg
d2l0aGluIGEKLSAgICAgICAgIGJ1bGsgcmVxdWVzdC4gIFJFUVVJUkVEIHdoZW4gbWV0aG9kIGlz
IFBPU1QuCiAKLSAgICAgIHZlcnNpb24gIFRoZSBjdXJyZW50IFJlc291cmNlIHZlcnNpb24uICBW
ZXJzaW9uIGlzIFJFUVVJUkVEIGlmIHRoZQotICAgICAgICAgU2VydmljZSBQcm92aWRlciBzdXBw
b3J0cyBFVGFncyBhbmQgdGhlIG1ldGhvZCBpcyBQVVQsIERFTEVURSwKLSAgICAgICAgIG9yIFBB
VENILgogCiAKLQotCiBEcmFrZSwgZXQgYWwuICAgICAgICAgICAgICBFeHBpcmVzIE1heSA1LCAy
MDEzICAgICAgICAgICAgICAgICBbUGFnZSAyNl0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAg
ICAgICBkcmFmdC1zY2ltLWFwaS0wMSAgICAgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKKyAg
ICAgICAgIGJ1bGsgcmVxdWVzdC4gIFJFUVVJUkVEIHdoZW4gbWV0aG9kIGlzIFBPU1QuCisKKyAg
ICAgIHZlcnNpb24gIFRoZSBjdXJyZW50IFJlc291cmNlIHZlcnNpb24uICBWZXJzaW9uIGlzIFJF
UVVJUkVEIGlmIHRoZQorICAgICAgICAgU2VydmljZSBQcm92aWRlciBzdXBwb3J0cyBFVGFncyBh
bmQgdGhlIG1ldGhvZCBpcyBQVVQsIERFTEVURSwKKyAgICAgICAgIG9yIFBBVENILgorCiAgICAg
ICBwYXRoICBUaGUgUmVzb3VyY2UncyByZWxhdGl2ZSBwYXRoLiAgSWYgdGhlIG1ldGhvZCBpcyBQ
T1NUIHRoZQogICAgICAgICAgdmFsdWUgbXVzdCBzcGVjaWZ5IGEgUmVzb3VyY2UgdHlwZSBlbmRw
b2ludDsgZS5nLiwgL1VzZXJzIG9yCiAgICAgICAgICAvR3JvdXBzIHdoZXJlYXMgYWxsIG90aGVy
IG1ldGhvZCB2YWx1ZXMgbXVzdCBzcGVjaWZ5IHRoZSBwYXRoCkBAIC0xNDk5LDIwICsxNTA1LDIw
IEBADQogICAgdGhlIFNlcnZpY2UgUHJvdmlkZXIgaWQgd2l0aCB0aGUgYnVsa0lkIG9mIHRoZSBj
cmVhdGVkIFJlc291cmNlLgogCiAgICBUaGVyZSBjYW4gYmUgbW9yZSB0aGVuIG9uZSBvcGVyYXRp
b24gcGVyIFJlc291cmNlIGluIGVhY2ggYnVsayBqb2IuCi0gICBUaGUgU2VydmljZSBDb25zdW1l
ciBNVVNUIHRha2Ugbm90aWNlIG9mIHRoZSB1bm9yZGVyZWQgc3RydWN0dXJlIG9mCi0gICBKU09O
IGFuZCB0aGUgU2VydmljZSBQcm92aWRlciBjYW4gcHJvY2VzcyBvcGVyYXRpb25zIGluIGFueSBv
cmRlci4KLSAgIEZvciBleGFtcGxlLCBpZiB0aGUgU2VydmljZSBDb25zdW1lciBzZW5kcyB0d28g
UFVUIG9wZXJhdGlvbnMgaW4gb25lCi0gICByZXF1ZXN0LCB0aGUgb3V0Y29tZSBpcyBub24tZGV0
ZXJtaW5pc3RpYy4KIAotICAgVGhlIFNlcnZpY2UgUHJvdmlkZXIgcmVzcG9uc2UgTVVTVCBpbmNs
dWRlIHRoZSByZXN1bHQgb2YgYWxsCiAKIAotCiBEcmFrZSwgZXQgYWwuICAgICAgICAgICAgICBF
eHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSAyN10KIAwKIEludGVybmV0
LURyYWZ0ICAgICAgICAgICAgICBkcmFmdC1zY2ltLWFwaS0wMSAgICAgICAgICAgICAgTm92ZW1i
ZXIgMjAxMgogCiAKKyAgIFRoZSBTZXJ2aWNlIENvbnN1bWVyIE1VU1QgdGFrZSBub3RpY2Ugb2Yg
dGhlIHVub3JkZXJlZCBzdHJ1Y3R1cmUgb2YKKyAgIEpTT04gYW5kIHRoZSBTZXJ2aWNlIFByb3Zp
ZGVyIGNhbiBwcm9jZXNzIG9wZXJhdGlvbnMgaW4gYW55IG9yZGVyLgorICAgRm9yIGV4YW1wbGUs
IGlmIHRoZSBTZXJ2aWNlIENvbnN1bWVyIHNlbmRzIHR3byBQVVQgb3BlcmF0aW9ucyBpbiBvbmUK
KyAgIHJlcXVlc3QsIHRoZSBvdXRjb21lIGlzIG5vbi1kZXRlcm1pbmlzdGljLgorCisgICBUaGUg
U2VydmljZSBQcm92aWRlciByZXNwb25zZSBNVVNUIGluY2x1ZGUgdGhlIHJlc3VsdCBvZiBhbGwK
ICAgIHByb2Nlc3NlZCBvcGVyYXRpb25zLiAgQSBsb2NhdGlvbiBhdHRyaWJ1dGUgdGhhdCBpbmNs
dWRlcyB0aGUKICAgIFJlc291cmNlJ3MgZW5kIHBvaW50IE1VU1QgYmUgcmV0dXJuZWQgZm9yIGFs
bCBvcGVyYXRpb25zIGV4Y2x1ZGluZwogICAgZmFpbGVkIFBPU1RzLiAgVGhlIHN0YXR1cyBhdHRy
aWJ1dGUgaW5jbHVkZXMgaW5mb3JtYXRpb24gYWJvdXQgdGhlCkBAIC0xNTU1LDEyICsxNTYxLDYg
QEANCiAgICAgICJzY2hlbWFzIjpbCiAgICAgICAgInVybjpzY2ltOnNjaGVtYXM6Y29yZToxLjAi
CiAgICAgIF0sCi0gICAgICJmYWlsT25FcnJvcnMiOjEsCi0gICAgICJPcGVyYXRpb25zIjpbCi0g
ICAgICAgewotICAgICAgICAgIm1ldGhvZCI6IlBPU1QiLAotICAgICAgICAgInBhdGgiOiIvVXNl
cnMiLAotICAgICAgICAgImJ1bGtJZCI6InF3ZXJ0eSIsCiAKIAogCkBAIC0xNTY5LDYgKzE1Njks
MTIgQEANCiBJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgZHJhZnQtc2NpbS1hcGktMDEgICAg
ICAgICAgICAgIE5vdmVtYmVyIDIwMTIKIAogCisgICAgICJmYWlsT25FcnJvcnMiOjEsCisgICAg
ICJPcGVyYXRpb25zIjpbCisgICAgICAgeworICAgICAgICAgIm1ldGhvZCI6IlBPU1QiLAorICAg
ICAgICAgInBhdGgiOiIvVXNlcnMiLAorICAgICAgICAgImJ1bGtJZCI6InF3ZXJ0eSIsCiAgICAg
ICAgICAiZGF0YSI6ewogICAgICAgICAgICAic2NoZW1hcyI6WwogICAgICAgICAgICAgICJ1cm46
c2NpbTpzY2hlbWFzOmNvcmU6MS4wIgpAQCAtMTYxMSwyMCArMTYxNywxOSBAQA0KICAgICAgICAg
ICJ2ZXJzaW9uIjoiV1wvXCIwZWU4YWRkMGE5MzhlMWFcIiIKICAgICAgICB9CiAgICAgIF0KLSAg
IH0KIAotICAgVGhlIFNlcnZpY2UgUHJvdmlkZXIgcmV0dXJucyB0aGUgZm9sbG93aW5nIHJlc3Bv
bnNlLgogCiAKK0RyYWtlLCBldCBhbC4gICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMg
ICAgICAgICAgICAgICAgIFtQYWdlIDI5XQorDAorSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAg
IGRyYWZ0LXNjaW0tYXBpLTAxICAgICAgICAgICAgICBOb3ZlbWJlciAyMDEyCiAKIAorICAgfQog
CisgICBUaGUgU2VydmljZSBQcm92aWRlciByZXR1cm5zIHRoZSBmb2xsb3dpbmcgcmVzcG9uc2Uu
CiAKLURyYWtlLCBldCBhbC4gICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDUsIDIwMTMgICAgICAg
ICAgICAgICAgIFtQYWdlIDI5XQotDAotSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgIGRyYWZ0
LXNjaW0tYXBpLTAxICAgICAgICAgICAgICBOb3ZlbWJlciAyMDEyCiAKLQogSFRUUC8xLjEgMjAw
IE9LCiBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL2pzb24KIApAQCAtMTY2OCwxMSArMTY3Myw2
IEBADQogICAgIF0KIH0KIAotICAgVGhlIGZvbGxvd2luZyByZXNwb25zZSBpcyByZXR1cm5lZCBp
ZiBhbiBlcnJvciBvY2N1cnJlZCB3aGVuCi0gICBhdHRlbXB0aW5nIHRvIGNyZWF0ZSB0aGUgVXNl
ciAnQWxpY2UnLiAgVGhlIFNlcnZpY2UgUHJvdmlkZXIgc3RvcHMKLSAgIHByb2Nlc3NpbmcgdGhl
IGJ1bGsgb3BlcmF0aW9uIGFuZCBpbW1lZGlhdGVseSByZXR1cm5zIGEgcmVzcG9uc2UgdG8KLSAg
IHRoZSBDb25zdW1lci4gIFRoZSByZXNwb25zZSBjb250YWlucyB0aGUgZXJyb3IgYW5kIGFueSBz
dWNjZXNzZnVsCi0gICByZXN1bHRzIHByaW9yIHRvIHRoZSBlcnJvci4KIAogCiAKQEAgLTE2ODEs
NiArMTY4MSwxMyBAQA0KIEludGVybmV0LURyYWZ0ICAgICAgICAgICAgICBkcmFmdC1zY2ltLWFw
aS0wMSAgICAgICAgICAgICAgTm92ZW1iZXIgMjAxMgogCiAKKyAgIFRoZSBmb2xsb3dpbmcgcmVz
cG9uc2UgaXMgcmV0dXJuZWQgaWYgYW4gZXJyb3Igb2NjdXJyZWQgd2hlbgorICAgYXR0ZW1wdGlu
ZyB0byBjcmVhdGUgdGhlIFVzZXIgJ0FsaWNlJy4gIFRoZSBTZXJ2aWNlIFByb3ZpZGVyIHN0b3Bz
CisgICBwcm9jZXNzaW5nIHRoZSBidWxrIG9wZXJhdGlvbiBhbmQgaW1tZWRpYXRlbHkgcmV0dXJu
cyBhIHJlc3BvbnNlIHRvCisgICB0aGUgQ29uc3VtZXIuICBUaGUgcmVzcG9uc2UgY29udGFpbnMg
dGhlIGVycm9yIGFuZCBhbnkgc3VjY2Vzc2Z1bAorICAgcmVzdWx0cyBwcmlvciB0byB0aGUgZXJy
b3IuCisKKwogSFRUUC8xLjEgMjAwIE9LCiBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL2pzb24K
IApAQCAtMTcyNSwxMyArMTczMiw2IEBADQogCiAKIAotCi0KLQotCi0KLQotCiBEcmFrZSwgZXQg
YWwuICAgICAgICAgICAgICBFeHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFn
ZSAzMV0KIAwKIEludGVybmV0LURyYWZ0ICAgICAgICAgICAgICBkcmFmdC1zY2ltLWFwaS0wMSAg
ICAgICAgICAgICAgTm92ZW1iZXIgMjAxMgpAQCAtMTkyMyw3ICsxOTIzLDggQEANCiAgICJtZW1i
ZXJzIjogWwogICAgIHsKICAgICAgICJ2YWx1ZSI6ICI5MmI3MjVjZC05NDY1LTRlN2QtOGMxNi0w
MWY4ZTE0NmI4N2EiLAotICAgICAgInR5cGUiOiAidXNlciIKKyAgICAgICIkcmVmIjogImh0dHBz
Oi8vZXhhbXBsZS5jb20vdjEvVXNlcnMvOTJiNzI1Y2QtOTQ2NS00ZTdkLThjMTYtMDFmOGUxNDZi
ODdhIiwKKyAgICAgICJ0eXBlIjogIlVzZXIiCiAgICAgfQogICBdCiB9CkBAIC0xOTU1LDcgKzE5
NTYsNiBAQA0KIAogCiAKLQogRHJha2UsIGV0IGFsLiAgICAgICAgICAgICAgRXhwaXJlcyBNYXkg
NSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgMzVdCiAMCiBJbnRlcm5ldC1EcmFmdCAgICAg
ICAgICAgICAgZHJhZnQtc2NpbS1hcGktMDEgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMTIKQEAg
LTIxNjQsNyArMjE2NCw4IEBADQogICAgICAgIm1lbWJlcnMiOiBbCiAgICAgICAgIHsKICAgICAg
ICAgICAidmFsdWUiOiAiNmM1YmI0NjgtMTRiMi00MTgzLWJhZjItMDZkNTIzZTAzYmQzIiwKLSAg
ICAgICAgICAidHlwZSI6ICJncm91cCIKKyAgICAgICAgICAiJHJlZiI6ICJodHRwczovL2V4YW1w
bGUuY29tL3YxL0dyb3Vwcy82YzViYjQ2OC0xNGIyLTQxODMtYmFmMi0wNmQ1MjNlMDNiZDMiLAor
ICAgICAgICAgICJ0eXBlIjogIkdyb3VwIgogICAgICAgICB9CiAgICAgICBdCiAgICAgfSwKQEAg
LTIxNzYsNyArMjE3Nyw2IEBADQogICAgICAgImRpc3BsYXlOYW1lIjogIkdyb3VwIEIiLAogICAg
ICAgIm1ldGEiOiB7CiAgICAgICAgICJjcmVhdGVkIjoiMjAxMS0wOC0wMVQxODoyOTo1MC44NzNa
IiwKLSAgICAgICAgImxhc3RNb2RpZmllZCI6IjIwMTEtMDgtMDFUMTg6Mjk6NTAuODczWiIsCiAK
IAogCkBAIC0yMTg1LDEzICsyMTg1LDE1IEBADQogSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAg
IGRyYWZ0LXNjaW0tYXBpLTAxICAgICAgICAgICAgICBOb3ZlbWJlciAyMDEyCiAKIAorICAgICAg
ICAibGFzdE1vZGlmaWVkIjoiMjAxMS0wOC0wMVQxODoyOTo1MC44NzNaIiwKICAgICAgICAgImxv
Y2F0aW9uIjoiaHR0cHM6Ly9leGFtcGxlLmNvbS92MS9Hcm91cHMvNmM1YmI0NjgtMTRiMi00MTgz
LWJhZjItMDZkNTIzZTAzYmQzIiwKICAgICAgICAgInZlcnNpb24iOiJXXC9cIndHQjg1czJRSk1q
aU5udUlcIiIKICAgICAgIH0sCiAgICAgICAibWVtYmVycyI6IFsKICAgICAgICAgewogICAgICAg
ICAgICJ2YWx1ZSI6ICJjM2EyNmRkMy0yN2EwLTRkZWMtYTJhYy1jZTIxMWUxMDVmOTciLAotICAg
ICAgICAgICJ0eXBlIjogImdyb3VwIgorICAgICAgICAgICIkcmVmIjogImh0dHBzOi8vZXhhbXBs
ZS5jb20vdjEvR3JvdXBzL2MzYTI2ZGQzLTI3YTAtNGRlYy1hMmFjLWNlMjExZTEwNWY5NyIsCisg
ICAgICAgICAgInR5cGUiOiAiR3JvdXAiCiAgICAgICAgIH0KICAgICAgIF0KICAgICB9CkBAIC0y
MjM0LDggKzIyMzYsNiBAQA0KIAogCiAKLQotCiBEcmFrZSwgZXQgYWwuICAgICAgICAgICAgICBF
eHBpcmVzIE1heSA1LCAyMDEzICAgICAgICAgICAgICAgICBbUGFnZSA0MF0KIAwKIEludGVybmV0
LURyYWZ0ICAgICAgICAgICAgICBkcmFmdC1zY2ltLWFwaS0wMSAgICAgICAgICAgICAgTm92ZW1i
ZXIgMjAxMgo=

--_006_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_
Content-Type: text/html; name="draft-ietf-scim-api-01.html"
Content-Description: draft-ietf-scim-api-01.html
Content-Disposition: attachment; filename="draft-ietf-scim-api-01.html";
	size=108380; creation-date="Thu, 14 Feb 2013 14:33:39 GMT";
	modification-date="Thu, 14 Feb 2013 14:33:40 GMT"
Content-Transfer-Encoding: base64
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--_006_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_
Content-Type: text/html; name="draft-ietf-scim-core-schema-01.html"
Content-Description: draft-ietf-scim-core-schema-01.html
Content-Disposition: attachment;
	filename="draft-ietf-scim-core-schema-01.html"; size=86786;
	creation-date="Thu, 14 Feb 2013 14:31:56 GMT";
	modification-date="Thu, 14 Feb 2013 14:31:57 GMT"
Content-Transfer-Encoding: base64
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--_006_56C3C758F9D6534CA3778EAA1E0C343753AC6803BLUPRD0412MB643_--

From prvs=2761C48E07=erik.wahlstrom@nexussafe.com  Mon Feb 18 02:35:37 2013
Return-Path: <prvs=2761C48E07=erik.wahlstrom@nexussafe.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D63021F882E for <scim@ietfa.amsl.com>; Mon, 18 Feb 2013 02:35:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.298
X-Spam-Level: 
X-Spam-Status: No, score=-2.298 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9g7VQKEdqUbG for <scim@ietfa.amsl.com>; Mon, 18 Feb 2013 02:35:36 -0800 (PST)
Received: from MailEdge.nexussafe.com (mailedge.nexussafe.com [83.241.133.98]) by ietfa.amsl.com (Postfix) with ESMTP id B53E421F8831 for <scim@ietf.org>; Mon, 18 Feb 2013 02:35:35 -0800 (PST)
Received: from MARVMAILCAS.technxs.com (10.75.28.35) by MailEdge.nexussafe.com (83.241.133.98) with Microsoft SMTP Server (TLS) id 14.1.438.0; Mon, 18 Feb 2013 11:35:28 +0100
Received: from MARVMAILDB.technxs.com ([fe80::95d1:b13:6f90:bdad]) by MarvMailCAS.technxs.com ([::1]) with mapi id 14.01.0438.000; Mon, 18 Feb 2013 11:35:14 +0100
From: =?iso-8859-1?Q?Erik_Wahlstr=F6m?= <erik.wahlstrom@nexussafe.com>
To: Shelley <randomshelley@gmail.com>
Thread-Topic: [scim] Addresses Value Attribute
Thread-Index: AQHOCH4LRKeQxCZzFU2piC436Miuaph/ZYUA
Date: Mon, 18 Feb 2013 10:35:14 +0000
Message-ID: <4ECE6E4F-8643-42C3-9417-8D13C52F0304@nexussafe.com>
References: <CAGUsYPw6mY2uAA9CnUQDZ6O1V7c=hcsAfs4G+qW7eujO4jc7EQ@mail.gmail.com>
In-Reply-To: <CAGUsYPw6mY2uAA9CnUQDZ6O1V7c=hcsAfs4G+qW7eujO4jc7EQ@mail.gmail.com>
Accept-Language: en-US, sv-SE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.75.28.106]
Content-Type: multipart/alternative; boundary="_000_4ECE6E4F864342C394178D13C52F0304nexussafecom_"
MIME-Version: 1.0
Cc: "<scim@ietf.org>" <scim@ietf.org>
Subject: Re: [scim] Addresses Value Attribute
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Feb 2013 10:35:37 -0000

--_000_4ECE6E4F864342C394178D13C52F0304nexussafecom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

+1

I just created a ticket for that. http://trac.tools.ietf.org/wg/scim/trac/t=
icket/36

/ Erik

On Feb 11, 2013, at 6:34 PM, Shelley wrote:

There seems to be a slight ambiguity in the definition of the addresses att=
ribute as to whether it has a "value" sub-attribute.

The "addresses" attribute defined in the core schema (6.2) indicates that i=
t is a "multi-valued attribute" and that its "value attribute is a complex =
type with the following sub-attributes". As such, it would seem that the ap=
propriate representation would be something similar to the following:

  "addresses": [
    {
      "type": "work",
      "primary": true,
      "value":
        {
          "streetAddress": "100 Universal City Plaza",
          "locality": "Hollywood",
          "region": "CA",
          "postalCode": "91608",
          "country": "USA",
          "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA"
       }
    },
    {
      "type": "home",
      "value":
        {
          "streetAddress": "456 Hollywood Blvd",
          "locality": "Hollywood",
          "region": "CA",
          "postalCode": "91608",
          "country": "USA",
          "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA"
        }
    }
  ],

However, the protocol specification indicates "Attributes that do not have =
a value Sub-Attribute; e.g., addresses" (3.3.2), implying that "addresses" =
does NOT have a "value" attribute. Further, the examples throughout the cor=
e specification (11.2, 11.3, 11.6) and protocol spec (3.3.2) use the follow=
ing representation, which imply that there is no "value" attribute:

  "addresses": [
    {
      "type": "work",
      "streetAddress": "100 Universal City Plaza",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA",
      "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA",
      "primary": true
    },
    {
      "type": "home",
      "streetAddress": "456 Hollywood Blvd",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA",
      "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA"
    }
  ]

Is the latter form the correct representation? If so, the "addresses" attri=
bute description should probably be updated to remove the reference to its =
"value attribute" and perhaps clarify that it has no "value" attribute. ___=
____________________________________________
scim mailing list
scim@ietf.org<mailto:scim@ietf.org>
https://www.ietf.org/mailman/listinfo/scim


--_000_4ECE6E4F864342C394178D13C52F0304nexussafecom_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <88DFC9B7A7DEE443A5611559CED5B95E@nexussafe.com>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
&#43;1
<div><br>
</div>
<div>I just created a ticket for that.&nbsp;<a href=3D"http://trac.tools.ie=
tf.org/wg/scim/trac/ticket/36">http://trac.tools.ietf.org/wg/scim/trac/tick=
et/36</a></div>
<div><br>
</div>
<div>/ Erik<br>
<div><br>
<div>
<div>On Feb 11, 2013, at 6:34 PM, Shelley wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">There seems to be a slight ambiguity in the defin=
ition of the addresses attribute as to whether it has a &quot;value&quot; s=
ub-attribute.<br>
<br>
The &quot;addresses&quot; attribute defined in the core schema (6.2) indica=
tes that it is a &quot;multi-valued attribute&quot; and that its &quot;valu=
e attribute is a complex type with the following sub-attributes&quot;. As s=
uch, it would seem that the appropriate representation would be
 something similar to the following:<br>
<br>
&nbsp; &quot;addresses&quot;: [<br>
&nbsp;&nbsp;&nbsp; {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;type&quot;: &quot;work&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;primary&quot;: true,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;value&quot;: <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;streetAddress&=
quot;: &quot;100 Universal City Plaza&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;locality&quot;=
: &quot;Hollywood&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;region&quot;: =
&quot;CA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;postalCode&quo=
t;: &quot;91608&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;country&quot;:=
 &quot;USA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;formatted&quot=
;: &quot;100 Universal City Plaza\nHollywood, CA 91608 USA&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<br>
&nbsp;&nbsp;&nbsp; },<br>
&nbsp;&nbsp;&nbsp; {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;type&quot;: &quot;home&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;value&quot;: <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;streetAddress&=
quot;: &quot;456 Hollywood Blvd&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;locality&quot;=
: &quot;Hollywood&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;region&quot;: =
&quot;CA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;postalCode&quo=
t;: &quot;91608&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;country&quot;:=
 &quot;USA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;formatted&quot=
;: &quot;456 Hollywood Blvd\nHollywood, CA 91608 USA&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<br>
&nbsp;&nbsp;&nbsp; }<br>
&nbsp; ],<br>
<br>
However, the protocol specification indicates &quot;Attributes that do not =
have a value Sub-Attribute; e.g., addresses&quot; (3.3.2), implying that &q=
uot;addresses&quot; does NOT have a &quot;value&quot; attribute. Further, t=
he examples throughout the core specification (11.2, 11.3, 11.6)
 and protocol spec (3.3.2) use the following representation, which imply th=
at there is no &quot;value&quot; attribute:<br>
<br>
&nbsp; &quot;addresses&quot;: [<br>
&nbsp;&nbsp;&nbsp; {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;type&quot;: &quot;work&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;streetAddress&quot;: &quot;100 Univers=
al City Plaza&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;locality&quot;: &quot;Hollywood&quot;,=
<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;region&quot;: &quot;CA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;postalCode&quot;: &quot;91608&quot;,<b=
r>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;country&quot;: &quot;USA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;formatted&quot;: &quot;100 Universal C=
ity Plaza\nHollywood, CA 91608 USA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;primary&quot;: true<br>
&nbsp;&nbsp;&nbsp; },<br>
&nbsp;&nbsp;&nbsp; {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;type&quot;: &quot;home&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;streetAddress&quot;: &quot;456 Hollywo=
od Blvd&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;locality&quot;: &quot;Hollywood&quot;,=
<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;region&quot;: &quot;CA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;postalCode&quot;: &quot;91608&quot;,<b=
r>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;country&quot;: &quot;USA&quot;,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;formatted&quot;: &quot;456 Hollywood B=
lvd\nHollywood, CA 91608 USA&quot;<br>
&nbsp;&nbsp;&nbsp; }<br>
&nbsp; ]<br>
<br>
Is the latter form the correct representation? If so, the &quot;addresses&q=
uot; attribute description should probably be updated to remove the referen=
ce to its &quot;value attribute&quot; and perhaps clarify that it has no &q=
uot;value&quot; attribute. _______________________________________________<=
br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
https://www.ietf.org/mailman/listinfo/scim<br>
</blockquote>
</div>
<br>
</div>
</div>
</body>
</html>

--_000_4ECE6E4F864342C394178D13C52F0304nexussafecom_--

From prvs=87673018D5=erik.wahlstrom@nexussafe.com  Sun Feb 24 12:25:25 2013
Return-Path: <prvs=87673018D5=erik.wahlstrom@nexussafe.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 904CD21F90CF for <scim@ietfa.amsl.com>; Sun, 24 Feb 2013 12:25:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.298
X-Spam-Level: 
X-Spam-Status: No, score=-2.298 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nc8iWdey3683 for <scim@ietfa.amsl.com>; Sun, 24 Feb 2013 12:25:24 -0800 (PST)
Received: from MailEdge.nexussafe.com (mailedge.nexussafe.com [83.241.133.98]) by ietfa.amsl.com (Postfix) with ESMTP id C008C21F88A2 for <scim@ietf.org>; Sun, 24 Feb 2013 12:25:21 -0800 (PST)
Received: from MARVMAILCAS.technxs.com (10.75.28.35) by MailEdge.nexussafe.com (83.241.133.98) with Microsoft SMTP Server (TLS) id 14.1.438.0; Sun, 24 Feb 2013 21:25:17 +0100
Received: from MARVMAILDB.technxs.com ([fe80::95d1:b13:6f90:bdad]) by MarvMailCAS.technxs.com ([::1]) with mapi id 14.01.0438.000; Sun, 24 Feb 2013 21:25:04 +0100
From: =?Windows-1252?Q?Erik_Wahlstr=F6m?= <erik.wahlstrom@nexussafe.com>
To: Kelly Grizzle <kelly.grizzle@sailpoint.com>
Thread-Topic: [scim] Reference data type - issue #33
Thread-Index: Ac4KxLeeCq718040Sy6SwfY3aL2ymwH/+iGA
Date: Sun, 24 Feb 2013 20:25:02 +0000
Message-ID: <1E5FB4AC-EFEB-43ED-A384-DBE3A8C69765@nexussafe.com>
References: <56C3C758F9D6534CA3778EAA1E0C343753AC6803@BLUPRD0412MB643.namprd04.prod.outlook.com>
In-Reply-To: <56C3C758F9D6534CA3778EAA1E0C343753AC6803@BLUPRD0412MB643.namprd04.prod.outlook.com>
Accept-Language: en-US, sv-SE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.75.28.12]
Content-Type: multipart/alternative; boundary="_000_1E5FB4ACEFEB43EDA384DBE3A8C69765nexussafecom_"
MIME-Version: 1.0
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Reference data type - issue #33
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Feb 2013 20:25:25 -0000

--_000_1E5FB4ACEFEB43EDA384DBE3A8C69765nexussafecom_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Hi,

+1 for the change in general but i kinda miss the $ref sub-attribute in sec=
tion "3.2.  Multi-valued Attributes".


My inclination is to keep references targeted towards SCIM objects.  If we =
see use cases and decide that non-SCIM references are important, we could e=
ither augment the =93reference=94 data type or add a new =93URL=94 datatype=
 that has metadata about the type of object to expect.

+1

/ Erik


On Feb 14, 2013, at 4:16 PM, Kelly Grizzle wrote:

Issue 33 now contains some proposed changes to formalize support for refere=
nces in SCIM.  Full information is available in the issue tracker here:http=
://trac.tools.ietf.org/wg/scim/trac/ticket/33.  A brief description of the =
changes:

1)      A new "Reference" data type was added in section 3.1.7 of the core =
schema document. This defines a reference to another SCIM object.
2)      The User, Group, and Enterprise User schemas were modified to make =
use of the reference attribute. For User, this is used in the "groups" attr=
ibute. For Group, this is used in the "members" attribute. For Enterprise U=
ser, this is used in the "manager" attribute.
3)      A new "referenceTypes" sub-attribute was added in section 10 of the=
 core schema document. This applies to the "attributes" and "subAttributes"=
 definitions of the Schema resource, and allows the schema to specify which=
 SCIM object types can be referenced for a given attribute.
4)      The examples in the API and core schema documents were updated to u=
se references where appropriate.


Currently, the text says that references MUST be references to SCIM objects=
.  There was some discussion about extending this concept to allow referenc=
ing other external non-SCIM objects (eg =96 a Facebook user, etc=85).  My i=
nclination is to keep references targeted towards SCIM objects.  If we see =
use cases and decide that non-SCIM references are important, we could eithe=
r augment the =93reference=94 data type or add a new =93URL=94 datatype tha=
t has metadata about the type of object to expect.

I=92ve attached the diff and the full documents.  Please review these chang=
es and respond with any comments or questions.

--Kelly
<issue33.patch><draft-ietf-scim-api-01.html><draft-ietf-scim-core-schema-01=
.html>_______________________________________________
scim mailing list
scim@ietf.org<mailto:scim@ietf.org>
https://www.ietf.org/mailman/listinfo/scim


--_000_1E5FB4ACEFEB43EDA384DBE3A8C69765nexussafecom_
Content-Type: text/html; charset="Windows-1252"
Content-ID: <D4885F47F32F8444B906D19843FCC93D@nexussafe.com>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
<base href=3D"x-msg://1097/">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
<div>Hi,</div>
<div><br>
</div>
<div>&#43;1 for the change in general but i kinda miss the&nbsp;$ref sub-at=
tribute in section&nbsp;&quot;3.2. &nbsp;Multi-valued Attributes&quot;.</di=
v>
<br>
<div><br>
<blockquote type=3D"cite">
<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1" style=3D"page: WordSection1; ">
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
My inclination is to keep references targeted towards SCIM objects.&nbsp; I=
f we see use cases and decide that non-SCIM references are important, we co=
uld either augment the =93reference=94 data type or add a new =93URL=94 dat=
atype that has metadata about the type of object
 to expect.</div>
</div>
</div>
</blockquote>
<br>
</div>
<div>&#43;1</div>
<div><br>
</div>
<div>/ Erik</div>
<div><br>
</div>
<br>
<div>
<div>On Feb 14, 2013, at 4:16 PM, Kelly Grizzle wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite"><span class=3D"Apple-style-span" style=3D"border-=
collapse: separate; font-family: Helvetica; font-style: normal; font-varian=
t: normal; font-weight: normal; letter-spacing: normal; line-height: normal=
; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: n=
one; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-hori=
zontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-dec=
orations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stro=
ke-width: 0px; font-size: medium; ">
<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1" style=3D"page: WordSection1; ">
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
Issue 33 now contains some proposed changes to formalize support for refere=
nces in SCIM.&nbsp; Full information is available in the issue tracker here=
:<a href=3D"http://trac.tools.ietf.org/wg/scim/trac/ticket/33" style=3D"col=
or: blue; text-decoration: underline; ">http://trac.tools.ietf.org/wg/scim/=
trac/ticket/33</a>.&nbsp;
 A brief description of the changes:<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
<o:p>&nbsp;</o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0.5in; font-size: 11pt; font-=
family: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; text=
-indent: -0.25in; ">
<span>1)<span style=3D"font: normal normal normal 7pt/normal 'Times New Rom=
an'; ">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D"Apple-converted-space">=
&nbsp;</span></span></span>A new &quot;Reference&quot; data type was added =
in section 3.1.7 of the core schema document. This defines a reference to a=
nother
 SCIM object.<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0.5in; font-size: 11pt; font-=
family: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; text=
-indent: -0.25in; ">
<span>2)<span style=3D"font: normal normal normal 7pt/normal 'Times New Rom=
an'; ">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D"Apple-converted-space">=
&nbsp;</span></span></span>The User, Group, and Enterprise User schemas wer=
e modified to make use of the reference attribute. For User, this
 is used in the &quot;groups&quot; attribute. For Group, this is used in th=
e &quot;members&quot; attribute. For Enterprise User, this is used in the &=
quot;manager&quot; attribute.<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0.5in; font-size: 11pt; font-=
family: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; text=
-indent: -0.25in; ">
<span>3)<span style=3D"font: normal normal normal 7pt/normal 'Times New Rom=
an'; ">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D"Apple-converted-space">=
&nbsp;</span></span></span>A new &quot;referenceTypes&quot; sub-attribute w=
as added in section 10 of the core schema document. This applies to the &qu=
ot;attributes&quot;
 and &quot;subAttributes&quot; definitions of the Schema resource, and allo=
ws the schema to specify which SCIM object types can be referenced for a gi=
ven attribute.<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0.5in; font-size: 11pt; font-=
family: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; text=
-indent: -0.25in; ">
<span>4)<span style=3D"font: normal normal normal 7pt/normal 'Times New Rom=
an'; ">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D"Apple-converted-space">=
&nbsp;</span></span></span>The examples in the API and core schema document=
s were updated to use references where appropriate.<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
<o:p>&nbsp;</o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
<o:p>&nbsp;</o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
Currently, the text says that references MUST be references to SCIM objects=
.&nbsp; There was some discussion about extending this concept to allow ref=
erencing other external non-SCIM objects (eg =96 a Facebook user, etc=85).&=
nbsp; My inclination is to keep references targeted
 towards SCIM objects.&nbsp; If we see use cases and decide that non-SCIM r=
eferences are important, we could either augment the =93reference=94 data t=
ype or add a new =93URL=94 datatype that has metadata about the type of obj=
ect to expect.<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
<o:p>&nbsp;</o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
I=92ve attached the diff and the full documents.&nbsp; Please review these =
changes and respond with any comments or questions.<o:p></o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
<o:p>&nbsp;</o:p></div>
<div style=3D"margin-right: 0in; margin-left: 0in; font-size: 11pt; font-fa=
mily: Calibri, sans-serif; margin-top: 0in; margin-bottom: 0.0001pt; ">
--Kelly<o:p></o:p></div>
</div>
<span>&lt;issue33.patch&gt;</span><span>&lt;draft-ietf-scim-api-01.html&gt;=
</span><span>&lt;draft-ietf-scim-core-schema-01.html&gt;</span>____________=
___________________________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org" style=3D"color: blue; text-decoration: und=
erline; ">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim" style=3D"color: blue=
; text-decoration: underline; ">https://www.ietf.org/mailman/listinfo/scim<=
/a><br>
</div>
</span></blockquote>
</div>
<br>
</body>
</html>

--_000_1E5FB4ACEFEB43EDA384DBE3A8C69765nexussafecom_--

From kelly.grizzle@sailpoint.com  Sun Feb 24 18:18:33 2013
Return-Path: <kelly.grizzle@sailpoint.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82DC621F90DB for <scim@ietfa.amsl.com>; Sun, 24 Feb 2013 18:18:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.834
X-Spam-Level: 
X-Spam-Status: No, score=-3.834 tagged_above=-999 required=5 tests=[AWL=-0.536, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UCf1xYjgbB08 for <scim@ietfa.amsl.com>; Sun, 24 Feb 2013 18:18:30 -0800 (PST)
Received: from co1outboundpool.messaging.microsoft.com (co1ehsobe006.messaging.microsoft.com [216.32.180.189]) by ietfa.amsl.com (Postfix) with ESMTP id ADF8021F9131 for <scim@ietf.org>; Sun, 24 Feb 2013 18:18:29 -0800 (PST)
Received: from mail116-co1-R.bigfish.com (10.243.78.197) by CO1EHSOBE041.bigfish.com (10.243.66.106) with Microsoft SMTP Server id 14.1.225.23; Mon, 25 Feb 2013 02:18:29 +0000
Received: from mail116-co1 (localhost [127.0.0.1])	by mail116-co1-R.bigfish.com (Postfix) with ESMTP id 37EA4160138; Mon, 25 Feb 2013 02:18:29 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.1.133; KIP:(null); UIP:(null); IPV:NLI; H:BLUPRD0412HT004.namprd04.prod.outlook.com; RD:none; EFVD:NLI
X-SpamScore: -54
X-BigFish: PS-54(z21aILz98dI9371Ic89bhc85dh8a5S1447Izz1f42h1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL17326ah8275dh18c673hz31h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1155h)
Received-SPF: softfail (mail116-co1: transitioning domain of sailpoint.com does not designate 132.245.1.133 as permitted sender) client-ip=132.245.1.133; envelope-from=kelly.grizzle@sailpoint.com; helo=BLUPRD0412HT004.namprd04.prod.outlook.com ; .outlook.com ; 
Received: from mail116-co1 (localhost.localdomain [127.0.0.1]) by mail116-co1 (MessageSwitch) id 1361758706337661_16903; Mon, 25 Feb 2013 02:18:26 +0000 (UTC)
Received: from CO1EHSMHS015.bigfish.com (unknown [10.243.78.216])	by mail116-co1.bigfish.com (Postfix) with ESMTP id 466E5540043; Mon, 25 Feb 2013 02:18:26 +0000 (UTC)
Received: from BLUPRD0412HT004.namprd04.prod.outlook.com (132.245.1.133) by CO1EHSMHS015.bigfish.com (10.243.66.25) with Microsoft SMTP Server (TLS) id 14.1.225.23; Mon, 25 Feb 2013 02:18:26 +0000
Received: from BLUPRD0412MB643.namprd04.prod.outlook.com ([169.254.4.83]) by BLUPRD0412HT004.namprd04.prod.outlook.com ([10.255.214.165]) with mapi id 14.16.0263.000; Mon, 25 Feb 2013 02:18:07 +0000
From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
To: =?iso-8859-1?Q?Erik_Wahlstr=F6m?= <erik.wahlstrom@nexussafe.com>
Thread-Topic: [scim] Reference data type - issue #33
Thread-Index: Ac4KxLeeCq718040Sy6SwfY3aL2ymwH/+iGAAA5DcxA=
Date: Mon, 25 Feb 2013 02:18:07 +0000
Message-ID: <56C3C758F9D6534CA3778EAA1E0C3437565148D6@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <56C3C758F9D6534CA3778EAA1E0C343753AC6803@BLUPRD0412MB643.namprd04.prod.outlook.com> <1E5FB4AC-EFEB-43ED-A384-DBE3A8C69765@nexussafe.com>
In-Reply-To: <1E5FB4AC-EFEB-43ED-A384-DBE3A8C69765@nexussafe.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-vipre-scanned: 3B55B310003D6C3B55B45D
x-originating-ip: [173.226.147.242]
Content-Type: multipart/alternative; boundary="_000_56C3C758F9D6534CA3778EAA1E0C3437565148D6BLUPRD0412MB643_"
MIME-Version: 1.0
X-OriginatorOrg: sailpoint.com
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Reference data type - issue #33
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Feb 2013 02:18:33 -0000

--_000_56C3C758F9D6534CA3778EAA1E0C3437565148D6BLUPRD0412MB643_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Thanks for the feedback, Erik.  Are you suggesting adding something like th=
is to section 3.2 (perhaps after the "value" sub-attribute and the examples=
)?

$ref
                The Reference of the target Resource, if the attribute is a=
 reference.

--Kelly

From: Erik Wahlstr=F6m [mailto:erik.wahlstrom@nexussafe.com]
Sent: Sunday, February 24, 2013 2:25 PM
To: Kelly Grizzle
Cc: scim@ietf.org
Subject: Re: [scim] Reference data type - issue #33

Hi,

+1 for the change in general but i kinda miss the $ref sub-attribute in sec=
tion "3.2.  Multi-valued Attributes".



My inclination is to keep references targeted towards SCIM objects.  If we =
see use cases and decide that non-SCIM references are important, we could e=
ither augment the "reference" data type or add a new "URL" datatype that ha=
s metadata about the type of object to expect.

+1

/ Erik


On Feb 14, 2013, at 4:16 PM, Kelly Grizzle wrote:


Issue 33 now contains some proposed changes to formalize support for refere=
nces in SCIM.  Full information is available in the issue tracker here:http=
://trac.tools.ietf.org/wg/scim/trac/ticket/33.  A brief description of the =
changes:

1)      A new "Reference" data type was added in section 3.1.7 of the core =
schema document. This defines a reference to another SCIM object.
2)      The User, Group, and Enterprise User schemas were modified to make =
use of the reference attribute. For User, this is used in the "groups" attr=
ibute. For Group, this is used in the "members" attribute. For Enterprise U=
ser, this is used in the "manager" attribute.
3)      A new "referenceTypes" sub-attribute was added in section 10 of the=
 core schema document. This applies to the "attributes" and "subAttributes"=
 definitions of the Schema resource, and allows the schema to specify which=
 SCIM object types can be referenced for a given attribute.
4)      The examples in the API and core schema documents were updated to u=
se references where appropriate.


Currently, the text says that references MUST be references to SCIM objects=
.  There was some discussion about extending this concept to allow referenc=
ing other external non-SCIM objects (eg - a Facebook user, etc...).  My inc=
lination is to keep references targeted towards SCIM objects.  If we see us=
e cases and decide that non-SCIM references are important, we could either =
augment the "reference" data type or add a new "URL" datatype that has meta=
data about the type of object to expect.

I've attached the diff and the full documents.  Please review these changes=
 and respond with any comments or questions.

--Kelly
<issue33.patch><draft-ietf-scim-api-01.html><draft-ietf-scim-core-schema-01=
.html>_______________________________________________
scim mailing list
scim@ietf.org<mailto:scim@ietf.org>
https://www.ietf.org/mailman/listinfo/scim


--_000_56C3C758F9D6534CA3778EAA1E0C3437565148D6BLUPRD0412MB643_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<base href=3D"x-msg://1097/"><style><!--
/* Font Definitions */
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.apple-style-span
	{mso-style-name:apple-style-span;}
span.apple-converted-space
	{mso-style-name:apple-converted-space;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Thanks for the feedback, =
Erik.&nbsp; Are you suggesting adding something like this to section 3.2 (p=
erhaps after the &#8220;value&#8221; sub-attribute and the examples)?<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">$ref<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The Refer=
ence of the target Resource, if the attribute is a reference.<o:p></o:p></s=
pan></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">--Kelly<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Erik Wah=
lstr=F6m [mailto:erik.wahlstrom@nexussafe.com]
<br>
<b>Sent:</b> Sunday, February 24, 2013 2:25 PM<br>
<b>To:</b> Kelly Grizzle<br>
<b>Cc:</b> scim@ietf.org<br>
<b>Subject:</b> Re: [scim] Reference data type - issue #33<o:p></o:p></span=
></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">Hi,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&#43;1 for the change in general but i kinda miss th=
e&nbsp;$ref sub-attribute in section&nbsp;&quot;3.2. &nbsp;Multi-valued Att=
ributes&quot;.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">My inclination is to keep references ta=
rgeted towards SCIM objects.&nbsp; If we see use cases and decide that non-=
SCIM references are important, we could either augment the &#8220;reference=
&#8221;
 data type or add a new &#8220;URL&#8221; datatype that has metadata about =
the type of object to expect.<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&#43;1<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">/ Erik<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On Feb 14, 2013, at 4:16 PM, Kelly Grizzle wrote:<o:=
p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">Issue 33 now contains some proposed cha=
nges to formalize support for references in SCIM.&nbsp; Full information is=
 available in the issue tracker here:<a href=3D"http://trac.tools.ietf.org/=
wg/scim/trac/ticket/33">http://trac.tools.ietf.org/wg/scim/trac/ticket/33</=
a>.&nbsp;
 A brief description of the changes:<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">&nbsp;<o:p></o:p></span></p>
</div>
<div style=3D"margin-left:.5in">
<p class=3D"MsoNormal" style=3D"text-indent:-.25in"><span style=3D"font-siz=
e:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">1)</span><=
span style=3D"font-size:7.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D=
"apple-converted-space">&nbsp;</span></span><span style=3D"font-size:11.0pt=
;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">A
 new &quot;Reference&quot; data type was added in section 3.1.7 of the core=
 schema document. This defines a reference to another SCIM object.<o:p></o:=
p></span></p>
</div>
<div style=3D"margin-left:.5in">
<p class=3D"MsoNormal" style=3D"text-indent:-.25in"><span style=3D"font-siz=
e:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">2)</span><=
span style=3D"font-size:7.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D=
"apple-converted-space">&nbsp;</span></span><span style=3D"font-size:11.0pt=
;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">The
 User, Group, and Enterprise User schemas were modified to make use of the =
reference attribute. For User, this is used in the &quot;groups&quot; attri=
bute. For Group, this is used in the &quot;members&quot; attribute. For Ent=
erprise User, this is used in the &quot;manager&quot; attribute.<o:p></o:p>=
</span></p>
</div>
<div style=3D"margin-left:.5in">
<p class=3D"MsoNormal" style=3D"text-indent:-.25in"><span style=3D"font-siz=
e:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">3)</span><=
span style=3D"font-size:7.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D=
"apple-converted-space">&nbsp;</span></span><span style=3D"font-size:11.0pt=
;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">A
 new &quot;referenceTypes&quot; sub-attribute was added in section 10 of th=
e core schema document. This applies to the &quot;attributes&quot; and &quo=
t;subAttributes&quot; definitions of the Schema resource, and allows the sc=
hema to specify which SCIM object types can be referenced for
 a given attribute.<o:p></o:p></span></p>
</div>
<div style=3D"margin-left:.5in">
<p class=3D"MsoNormal" style=3D"text-indent:-.25in"><span style=3D"font-siz=
e:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">4)</span><=
span style=3D"font-size:7.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class=3D=
"apple-converted-space">&nbsp;</span></span><span style=3D"font-size:11.0pt=
;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">The
 examples in the API and core schema documents were updated to use referenc=
es where appropriate.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">Currently, the text says that reference=
s MUST be references to SCIM objects.&nbsp; There was some discussion about=
 extending this concept to allow referencing other external non-SCIM
 objects (eg &#8211; a Facebook user, etc&#8230;).&nbsp; My inclination is =
to keep references targeted towards SCIM objects.&nbsp; If we see use cases=
 and decide that non-SCIM references are important, we could either augment=
 the &#8220;reference&#8221; data type or add a new &#8220;URL&#8221; datat=
ype
 that has metadata about the type of object to expect.<o:p></o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">I&#8217;ve attached the diff and the fu=
ll documents.&nbsp; Please review these changes and respond with any commen=
ts or questions.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;">--Kelly<o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:13.5pt;font-family:&quot;He=
lvetica&quot;,&quot;sans-serif&quot;">&lt;issue33.patch&gt;&lt;draft-ietf-s=
cim-api-01.html&gt;&lt;draft-ietf-scim-core-schema-01.html&gt;_____________=
__________________________________<br>
scim mailing list<br>
<a href=3D"mailto:scim@ietf.org">scim@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/scim">https://www.ietf.org=
/mailman/listinfo/scim</a><o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_56C3C758F9D6534CA3778EAA1E0C3437565148D6BLUPRD0412MB643_--

From randomshelley@gmail.com  Mon Feb 25 08:38:44 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55E0121F950E for <scim@ietfa.amsl.com>; Mon, 25 Feb 2013 08:38:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r3hbY-36elge for <scim@ietfa.amsl.com>; Mon, 25 Feb 2013 08:38:43 -0800 (PST)
Received: from mail-ie0-x22f.google.com (mail-ie0-x22f.google.com [IPv6:2607:f8b0:4001:c03::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 5E7D621F9552 for <scim@ietf.org>; Mon, 25 Feb 2013 08:38:42 -0800 (PST)
Received: by mail-ie0-f175.google.com with SMTP id c12so3332764ieb.34 for <scim@ietf.org>; Mon, 25 Feb 2013 08:38:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=DcePMVhICZTJhTtKGtW4cTHXg7qyHkdOKfEoOsziZEc=; b=pv7aSSlREPtOL0BRQ0rI1RmjzuLFk55tpfCHj7zK8Uiud9JK+WkjTOpEpqZ2HSABJa YQLpSmt0li1fuoo8dfdxpS3hBZdCQhPxBIp5YfcJVyK6Nb3N4Zz5l4EYtPUWdfAy4/qX 7SO7yTTukQ/btnPhuxg1+86whSTnO305Enz6A2A9OIlIgtiP0jN3QP5fNSnFXxwFa4nW NEA7ZTBcIicbnNwdVf3CyM8aMeSwNJCwos0D+OBGHNnaRmhR7bSa0wRJyZxtRW1TWViA 6n/L62jl7SNBl10KOWSoGJYhRxSgugg1of8UxKkAbNzUAWe+2l6NhAj1SbL2AFhsdbq2 yARw==
MIME-Version: 1.0
X-Received: by 10.43.9.137 with SMTP id ow9mr4708258icb.32.1361810321950; Mon, 25 Feb 2013 08:38:41 -0800 (PST)
Received: by 10.64.23.230 with HTTP; Mon, 25 Feb 2013 08:38:41 -0800 (PST)
In-Reply-To: <56C3C758F9D6534CA3778EAA1E0C343753AC4630@BLUPRD0412MB643.namprd04.prod.outlook.com>
References: <CAGUsYPz7_9Tat93aC2t=YAQcHG6dmboYDYij_8sRpKA6CZoWEA@mail.gmail.com> <56C3C758F9D6534CA3778EAA1E0C343753AB2F38@BLUPRD0412MB643.namprd04.prod.outlook.com> <CAGUsYPwUt997zV9sxC4p93Jz=9j+bWeqygyMSkssM1gMZfxhpQ@mail.gmail.com> <56C3C758F9D6534CA3778EAA1E0C343753AC4630@BLUPRD0412MB643.namprd04.prod.outlook.com>
Date: Mon, 25 Feb 2013 10:38:41 -0600
Message-ID: <CAGUsYPyV7RjdmbUMcQ5N8NdwGjPzt2xHSANyNJon_uceNjhUgA@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: Kelly Grizzle <kelly.grizzle@sailpoint.com>
Content-Type: multipart/alternative; boundary=bcaec5161fcd7dc62204d68f2c74
Cc: "scim@ietf.org" <scim@ietf.org>
Subject: Re: [scim] Groups Member Type
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Feb 2013 16:38:44 -0000

--bcaec5161fcd7dc62204d68f2c74
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Thanks, Kelly. Given that the ID may represent either a User or Group and
only the combination of "type" and "value" uniquely identify the reference,
should the canonical "type" attribute for group members be REQUIRED as
well? (Further, the majority of examples throughout the Protocol
specification only include a "value" and not "type", so it's ambiguous as
to whether these "values" represent Users or Groups.)


On Mon, Feb 11, 2013 at 4:02 PM, Kelly Grizzle
<kelly.grizzle@sailpoint.com>wrote:

>  I opened ticket #35 to change this.****
>
> ** **
>
> http://trac.tools.ietf.org/wg/scim/trac/ticket/35****
>
> ** **
>
> --Kelly****
>
> ** **
>
> *From:* scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] *On Behalf
> Of *Shelley
> *Sent:* Monday, February 11, 2013 11:36 AM
> *To:* Kelly Grizzle
> *Cc:* scim@ietf.org
> *Subject:* Re: [scim] Groups Member Type****
>
> ** **
>
> +1 to mark it as "immutable".****
>
> On Mon, Feb 4, 2013 at 8:08 AM, Kelly Grizzle <kelly.grizzle@sailpoint.co=
m>
> wrote:****
>
> Good point.  It seems like this should say =93immutable=94 rather than
> =93read-only=94, since it can be set initially but not updated.  Thoughts=
 from
> anyone else?  If this seems reasonable I=92ll open an issue to get this f=
ixed.
> ****
>
>  ****
>
> --Kelly****
>
>  ****
>
> *From:* scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] *On Behalf
> Of *Shelley
> *Sent:* Friday, February 01, 2013 1:37 PM
> *To:* scim@ietf.org
> *Subject:* [scim] Groups Member Type****
>
>  ****
>
> As indicated in Section 8, the canonical types for Group members are
> READ-ONLY. As such, how can consumers provide the type (i.e. "User" or
> "Group")? Is it implied that IDs are unique across both users and groups =
in
> order for service providers to fulfill this requirement?****
>
> ** **
>

--bcaec5161fcd7dc62204d68f2c74
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Thanks, Kelly. Given that the ID may represent either a User or Group and o=
nly the combination of &quot;type&quot; and &quot;value&quot; uniquely iden=
tify the reference, should the canonical &quot;type&quot; attribute for gro=
up members be REQUIRED as well? (Further, the majority of examples througho=
ut the Protocol specification only include a &quot;value&quot; and not &quo=
t;type&quot;, so it&#39;s ambiguous as to whether these &quot;values&quot; =
represent Users or Groups.)<br>
<br><br><div class=3D"gmail_quote">On Mon, Feb 11, 2013 at 4:02 PM, Kelly G=
rizzle <span dir=3D"ltr">&lt;<a href=3D"mailto:kelly.grizzle@sailpoint.com"=
 target=3D"_blank">kelly.grizzle@sailpoint.com</a>&gt;</span> wrote:<br><bl=
ockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #=
ccc solid;padding-left:1ex">






<div link=3D"blue" vlink=3D"purple" lang=3D"EN-US">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">I opened ticket #35 to ch=
ange this.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><a href=3D"http://trac.to=
ols.ietf.org/wg/scim/trac/ticket/35" target=3D"_blank">http://trac.tools.ie=
tf.org/wg/scim/trac/ticket/35</a><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">--Kelly<u></u><u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> <a href=
=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@ietf.org</=
a> [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-=
bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Monday, February 11, 2013 11:36 AM<br>
<b>To:</b> Kelly Grizzle<br>
<b>Cc:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> Re: [scim] Groups Member Type<u></u><u></u></span></p><div>=
<div class=3D"h5">
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">+1 to mark it as &quo=
t;immutable&quot;.<u></u><u></u></p>
<div>
<p class=3D"MsoNormal">On Mon, Feb 4, 2013 at 8:08 AM, Kelly Grizzle &lt;<a=
 href=3D"mailto:kelly.grizzle@sailpoint.com" target=3D"_blank">kelly.grizzl=
e@sailpoint.com</a>&gt; wrote:<u></u><u></u></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">Good point.=A0 It seems l=
ike this should say =93immutable=94 rather than =93read-only=94, since it c=
an be set
 initially but not updated.=A0 Thoughts from anyone else?=A0 If this seems =
reasonable I=92ll open an issue to get this fixed.</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">=A0</span><u></u><u></u><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">--Kelly</span><u></u><u><=
/u></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">=A0</span><u></u><u></u><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;">
<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank">scim-bounces@iet=
f.org</a> [mailto:<a href=3D"mailto:scim-bounces@ietf.org" target=3D"_blank=
">scim-bounces@ietf.org</a>]
<b>On Behalf Of </b>Shelley<br>
<b>Sent:</b> Friday, February 01, 2013 1:37 PM<br>
<b>To:</b> <a href=3D"mailto:scim@ietf.org" target=3D"_blank">scim@ietf.org=
</a><br>
<b>Subject:</b> [scim] Groups Member Type</span><u></u><u></u></p>
<div>
<p class=3D"MsoNormal">=A0<u></u><u></u></p>
<p class=3D"MsoNormal">As indicated in Section 8, the canonical types for G=
roup members are READ-ONLY. As such, how can consumers provide the type (i.=
e. &quot;User&quot; or &quot;Group&quot;)? Is it implied that IDs are
 unique across both users and groups in order for service providers to fulf=
ill this requirement?<u></u><u></u></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
</div></div></div>
</div>

</blockquote></div><br>

--bcaec5161fcd7dc62204d68f2c74--

From randomshelley@gmail.com  Mon Feb 25 09:01:46 2013
Return-Path: <randomshelley@gmail.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3EAD21F9554 for <scim@ietfa.amsl.com>; Mon, 25 Feb 2013 09:01:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gQfx0wspEvP2 for <scim@ietfa.amsl.com>; Mon, 25 Feb 2013 09:01:46 -0800 (PST)
Received: from mail-ie0-x229.google.com (mail-ie0-x229.google.com [IPv6:2607:f8b0:4001:c03::229]) by ietfa.amsl.com (Postfix) with ESMTP id 359DC21F94D1 for <scim@ietf.org>; Mon, 25 Feb 2013 09:01:46 -0800 (PST)
Received: by mail-ie0-f169.google.com with SMTP id 13so3403768iea.28 for <scim@ietf.org>; Mon, 25 Feb 2013 09:01:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=2T1Xa9uRtVk+iXeDVB30G/YZn331SbSBN1HeX+kImRk=; b=iC6+QkzenRuq+boG0m1LwW2fwMIzcG7RzHl9A/PXX26sTrfcwzcbww+CQo/0WbGwzj TUWnEZbcu4Qu3k4aJNkKl4DCvPNi6usRAkjYd817EqM1fWIF027YNPKojtSLE+tXd+5H PLa/d5Ea0M9kE76BiFhNlaERcH98V4My7LaSVmfQB89D1DUrgjRhV/23xTxt/qQorlDB xSqSshr9N7bHjqjX0i95MBjvV/QtD+8UBxytv8MB7gQC6/F5PO0oXM1drZeqzf+7PkGl aFWmUd4jaBeXLMJwqpv5N5qfpYJermLxdpsm7jYqN2+EhMcOSZtjMsVS+7NlFuelV4bI bnww==
MIME-Version: 1.0
X-Received: by 10.50.152.173 with SMTP id uz13mr3394867igb.106.1361811705755;  Mon, 25 Feb 2013 09:01:45 -0800 (PST)
Received: by 10.64.23.230 with HTTP; Mon, 25 Feb 2013 09:01:45 -0800 (PST)
Date: Mon, 25 Feb 2013 11:01:45 -0600
Message-ID: <CAGUsYPyfW5oZaXZNQU1w__E69ZBcDqu9UUCspV7CcJBd8hX_eA@mail.gmail.com>
From: Shelley <randomshelley@gmail.com>
To: scim@ietf.org
Content-Type: multipart/alternative; boundary=e89a8f2347e7f8f7ee04d68f7e66
Subject: [scim] Multi-Valued Display Attribute
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scim>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Feb 2013 17:01:47 -0000

--e89a8f2347e7f8f7ee04d68f7e66
Content-Type: text/plain; charset=ISO-8859-1

According to the Core specification section 3.2, the "display" attribute is
READ-ONLY. It is my understanding that READ-ONLY attributes should be
IGNORED by Service Providers when specified in a request, and that it is
the Service Provider's option to include READ-ONLY attributes in responses
in accordance with the specification's description of the attribute. In the
case of an attribute such as a multi-valued "display" attribute, there is
no specific requirement other than to serve as a human-readable name, and
so it is up to the Service Providers to determine an appropriate value for
this attribute, if any. Please let me know if I am misunderstanding any of
this.

If my understanding is correct, the use of the "display" attribute for
Group members is misleading throughout the Protocol specification. The
majority of examples throughout (primarily for PATCH) include a "display"
attribute when specifying Group members. One example mentions that: "The
"display" Sub-Attribute in this request is optional since the value
attribute uniquely identifies the user to be added." However, isn't the
"display" attribute is not only "optional", but actually *irrelevant *when
supplied in the request? Should the "display" attribute and the
corresponding text be removed completely from these examples?

--e89a8f2347e7f8f7ee04d68f7e66
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

According to the Core specification section 3.2, the &quot;display&quot; at=
tribute is READ-ONLY. It is my understanding that READ-ONLY attributes shou=
ld be IGNORED by Service Providers when specified in a request, and that it=
 is the Service Provider&#39;s option to include READ-ONLY attributes in re=
sponses in accordance with the specification&#39;s description of the attri=
bute. In the case of an attribute such as a multi-valued &quot;display&quot=
; attribute, there is no specific requirement other than to serve as a huma=
n-readable name, and so it is up to the Service Providers to determine an a=
ppropriate value for this attribute, if any. Please let me know if I am mis=
understanding any of this.<br>
<br>If my understanding is correct, the use of the &quot;display&quot; attr=
ibute for Group members is misleading throughout the Protocol specification=
. The majority of examples throughout (primarily for PATCH) include a &quot=
;display&quot; attribute when specifying Group members. One example mention=
s that: &quot;The &quot;display&quot; Sub-Attribute in this request is opti=
onal since the value attribute uniquely identifies the user to be added.&qu=
ot; However, isn&#39;t the &quot;display&quot; attribute is not only &quot;=
optional&quot;, but actually <i>irrelevant </i>when supplied in the request=
? Should the &quot;display&quot; attribute and the corresponding text be re=
moved completely from these examples?<br>

--e89a8f2347e7f8f7ee04d68f7e66--
