From nobody Sun May 1 04:02:26 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D68912B061 for ; Sun, 1 May 2016 04:02:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.399 X-Spam-Level: X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com header.b=0TtALpnw; dkim=pass (2048-bit key) header.d=healthintersections-com-au.20150623.gappssmtp.com header.b=d2FwV8Em Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zCZwGIpjNAMe for ; Sun, 1 May 2016 04:02:22 -0700 (PDT) Received: from mail-ig0-x22c.google.com (mail-ig0-x22c.google.com [IPv6:2607:f8b0:4001:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CC5412B046 for ; Sun, 1 May 2016 04:02:22 -0700 (PDT) Received: by mail-ig0-x22c.google.com with SMTP id m9so54213575ige.1 for ; Sun, 01 May 2016 04:02:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc; bh=AuBAafdlubXNwVUqOV0A1WtEHhRnRkKA9hHB1fbXBAw=; b=0TtALpnwsiUB18W4eeKFfZO11SaCGW5PNGI6SHR54M1flvS9Rd7RdsIrd82W/eNP8D 6sl3Xl1GoL67aktOepEJOBzU57GdjvFewZmJ4Kguezk1Biydu0hGrnNecsDxgWtqUpNp eXSD5CyihL3pfZ06CpGhF728K3QYCtDxPKoQmZos1uqXfUUn9wkl75B5jLIyAupJMCeO fiKxZixM3HqWJTX/+lwuMQyQIs02LQ/if/+5Uzt5aRu8zQgqFW/600koeNeUXBxsobkq hYzBHI5ELW+Pmgkf17Hdih0lzq4XrMiFx5oOOVrGQFLIvyN638YijquZQ4CoPBNt6J9K 2CbQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=healthintersections-com-au.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc; bh=AuBAafdlubXNwVUqOV0A1WtEHhRnRkKA9hHB1fbXBAw=; b=d2FwV8Em9PL5xFJi2MfJmV+MWPmkZxxP/c7fnlR8spqUpWnlEoMU/xmBWeCDv1zVZT iMpLQXTmvagyQwh/5PB8PuGfQ3swnTm4fIaCVdV/rIbMGizNrp8TvGMBL72DXoPntTyp AF/VJ30ioMLSrdh+Kjxv9HC3V5CR5rvSfqfxn6CRJMhdASnFkghsPwUkH47GB4yUQuzt GThxI0xpCFEJIPfQBu4NDQnkjevmlEG5TWQPqE1u+xr90c12tS+TwH7S/hfAkHso1yXV yr3gfG2Ph7HqC60YlodL306bJMZbAcNl2W+GFb5PSSAAd939QBn1yYyNYyw/1mLTNmi5 U51A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to:cc; bh=AuBAafdlubXNwVUqOV0A1WtEHhRnRkKA9hHB1fbXBAw=; b=gHA/kyN0RTQsR8JNM5si9khpekr5rFNaE6tOdPU08nmGy8JiR+4E3OaFn0A7SaKu1q x3KgfXlqcOsyYRT6uD6cGq7aIDd7xPREcfIvQb5FqN/i+gRwr3KlHQqCnlB23A7ptrzc cfjnga+s4uc8MVEEA13qq21OyG2A31vI4XDeaWXggWyC6H7xJTp5mo3oRGkO4XZkKfSn R8t+9SB5SOWzRgxb1y5wXf9qp/JD7RTOW8G7eYohVqsd4gW/7VvYCHxNoKf7n955UCrj CpgSgIU1ZnfSHxzwwIhzSJPnXgJqMd/rVIAIHJIxVKJ/rG16mRtjW86PLX0qYOg/AIxW KYPw== X-Gm-Message-State: AOPr4FUfK7OAEsoVEhEkrJyMFYITB8lFX3JdAmoebeg9JXMlaIrkZq3cK1xNoWMzdZU4NRHcj0vS9Rt6WM5ngA== MIME-Version: 1.0 X-Received: by 10.50.6.15 with SMTP id w15mr14734846igw.91.1462100541982; Sun, 01 May 2016 04:02:21 -0700 (PDT) Sender: grahameg@gmail.com Received: by 10.107.146.212 with HTTP; Sun, 1 May 2016 04:02:21 -0700 (PDT) In-Reply-To: References: Date: Sun, 1 May 2016 21:02:21 +1000 X-Google-Sender-Auth: wQjhx_a8xGjA-A3BAQj-IAtvUfU Message-ID: From: Grahame Grieve To: Kelly Grizzle Content-Type: multipart/alternative; boundary=047d7ba980c26e52e20531c5cf6f Archived-At: Cc: "scim@ietf.org" Subject: Re: [scim] SCIM interop at CIS X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 May 2016 11:02:25 -0000 --047d7ba980c26e52e20531c5cf6f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable hi Kelly I'd like to participate as a server provider please - can you give edit access to grahameg@gmail.com thanks Grahame On Fri, Apr 29, 2016 at 1:56 AM, Kelly Grizzle wrote: > Many SCIM v2 service providers and clients are planning an interop that > will happen over the next month and be presented at the Cloud Identity > Summit. If you are interested, here is what you need to know. > > > > 1. There is a google drive folder > > that contains all of documents for this interop. If you need access, plea= se > request it or send me your email address. > > 2. *Everyone interested: *Please add your project as a participant > and your contact information to the first two sheets here > > . > > 3. *Service Providers:* Have a v2 server that is publicly available > by *May 1*. Copy the =E2=80=9CService Provider Details Template=E2=80=9D= to a new doc in > this folder > > and fill in the details. Include the JSON of your ServiceProviderConfig > and any other relevant information about things your server does/does not > support. > > 4. *Clients:* Between May 1 and May 31, choose as many service > providers as you want to interop with. Communicate with the service > provider directly (email should be in the Contact Info on the spreadsheet= ) > to get URLs and credentials. Execute the test cases that apply to your > pairing from the spreadsheet. For every interop pair, copy the =E2=80=9C= Results > Template=E2=80=9D spreadsheet here > > to a new spreadsheet, and fill in the results. Both participants should > indicate on this spreadsheet whether the results can be made public or no= t. > > 5. *Present the results on June* *6 at CIS*. > > > > The goals are: a) test out as many implementations as possible to ensure > interoperability, and b) look for any problems with the spec that may nee= d > to be ironed out. > > > > Any questions or suggestions, please let me know! > > > > --Kelly > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > > --=20 ----- http://www.healthintersections.com.au / grahame@healthintersections.com.au / +61 411 867 065 --047d7ba980c26e52e20531c5cf6f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
hi Kelly

I'd like to participate as= a server provider please - can you give edit access to grahameg@gmail.com

thanks
Grahame


<= div class=3D"gmail_quote">On Fri, Apr 29, 2016 at 1:56 AM, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

Many SCIM v2 service providers and clients are plann= ing an interop that will happen over the next month and be presented at the= Cloud Identity Summit.=C2=A0 If you are interested, here is what you need = to know.

=C2=A0

1.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 There is a google drive folder that contains all of documents for this interop. If you need acc= ess, please request it or send me your email address.

2.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Everyone interested: Please add your project as= a participant and your contact information to the first two sheets here.

3.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Service Providers: Have a v2 server that is pub= licly available by May 1.=C2=A0 Copy the =E2=80=9CService Provider Details Templ= ate=E2=80=9D to a new doc in this folder and fill in the details.=C2=A0 Include the JSON of your ServiceP= roviderConfig and any other relevant information about things your server d= oes/does not support.

4.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Clients: Between May 1 and May 31, choose as ma= ny service providers as you want to interop with.=C2=A0 Communicate with th= e service provider directly (email should be in the Contact Info on the spr= eadsheet) to get URLs and credentials.=C2=A0 Execute the test cases that apply to your pairing from the spreadsheet.=C2= =A0 For every interop pair, copy the =E2=80=9CResults Template=E2=80=9D spr= eadsheet here to a new spreadsheet, and fill in the results.=C2=A0 Both particip= ants should indicate on this spreadsheet whether the results can be made pu= blic or not.

5.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Present the results on June 6 at CIS.=

=C2=A0

The goals are: a) test out as many implementations a= s possible to ensure interoperability, and b) look for any problems with th= e spec that may need to be ironed out.

=C2=A0

Any questions or suggestions, please let me know!

=C2=A0

--Kelly


_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim




--
--047d7ba980c26e52e20531c5cf6f-- From nobody Mon May 2 06:53:37 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7C0412D512 for ; Mon, 2 May 2016 06:53:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=salesforce.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XgNRwumX7yaK for ; Mon, 2 May 2016 06:53:34 -0700 (PDT) Received: from mail-ig0-x22d.google.com (mail-ig0-x22d.google.com [IPv6:2607:f8b0:4001:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 247611200A0 for ; Mon, 2 May 2016 06:53:34 -0700 (PDT) Received: by mail-ig0-x22d.google.com with SMTP id s8so74119085ign.0 for ; Mon, 02 May 2016 06:53:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salesforce.com; s=google; h=mime-version:from:date:message-id:subject:to:cc; bh=kRuo9dodNfz+vQhu4f0AqTZvtjgjJy/j213G3l+xfhw=; b=jtP2ZJKZW6mi3UJId34jxhW2cSYTlgevZSzXfWrItCm+KfLiD9V3zv7WZ6Y0k+g7MQ ZBAF3kw0TyPAR1BCUAi4L+3x8KCCKnFPrj+YOZzZOsh1YlDBvjB15c3MhzIEK56VTCn6 CdBle/2kml1fPA6U5dXmI5qVSX3Jh8C4FsFJI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=kRuo9dodNfz+vQhu4f0AqTZvtjgjJy/j213G3l+xfhw=; b=Qbw5nyn9YFcgjjEw+1chI0QtGq7g0xFnMnxTRyNf5Pt9R3KxHDqlFXQ21iCECpcAIL dl1QCwkfP8J5VMtQivAbDADmN+FPlChzGONICixC6w5hWag7KfKZ9b/wtK2W8jfXTlUG XKH1S+pr0PosAQ2I/30jesfVBl2kZtARDPwjnVgWIMrtmxhZSdKLF3Ak9fQGd0YCXxNR fE/OqyyNlxdngrtegMfEEruwNDqNJvj4e7jMXiZJqg4dAVcOAUNsTckK3hdbCZG0DELO vO4JHyDbaa99hLzlfJvp4RFwbbxFFBVPJHGbqW+w3HNIxdo1Z89lf6YKKhnuYpGavl5i X4Tw== X-Gm-Message-State: AOPr4FVXrKgw84BSPtqT07opT1XRNidzcsKRf8YwL634q0dS1NB5kIAX6cdtX9Ij3Fg3ByyB/h2Zc5Q4vTUV2iR+ X-Received: by 10.50.27.99 with SMTP id s3mr20714764igg.88.1462197213374; Mon, 02 May 2016 06:53:33 -0700 (PDT) MIME-Version: 1.0 Received: by 10.36.249.193 with HTTP; Mon, 2 May 2016 06:53:13 -0700 (PDT) From: Ian Glazer Date: Mon, 2 May 2016 09:53:13 -0400 Message-ID: To: "scim@ietf.org WG" Content-Type: multipart/alternative; boundary=047d7b10ce9b7f2b580531dc5154 Archived-At: Cc: Matthew Bahrenburg Subject: [scim] Salesforce server ready to go X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 May 2016 13:53:35 -0000 --047d7b10ce9b7f2b580531dc5154 Content-Type: text/plain; charset=UTF-8 Hi gang - Salesforce's v2 server is up and the config information is in the google drive folder. Hit Matt or I up and we'll get you sorted with credentials. i -- Ian Glazer Senior Director, Identity +1 202 255 3166 @iglazer --047d7b10ce9b7f2b580531dc5154 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi gang -

Salesforce's v2 server is= up and the config information is in the google drive folder. Hit Matt or I= up and we'll get you sorted with credentials.

i

--
Ian Glazer
Senior Director, Identity
+1 202 255 3166
--047d7b10ce9b7f2b580531dc5154-- From nobody Tue May 3 06:33:52 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCB1F12D1E2 for ; Tue, 3 May 2016 06:33:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=unboundid.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kwBda3bP8rAA for ; Tue, 3 May 2016 06:33:50 -0700 (PDT) Received: from mail-oi0-x230.google.com (mail-oi0-x230.google.com [IPv6:2607:f8b0:4003:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C9AF12B05D for ; Tue, 3 May 2016 06:33:50 -0700 (PDT) Received: by mail-oi0-x230.google.com with SMTP id x19so25075679oix.2 for ; Tue, 03 May 2016 06:33:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=unboundid.com; s=google; h=from:subject:date:message-id:cc:to:mime-version; bh=q4/FPv+R9qG+a+ldls3rDzHh0M2ufXNgfUbQdpgsQws=; b=SLeE8TdcJC5YoRXimx14tTkzdP2PGfdtuKfToBOxSfG446557vtwC9mUuKOaJ8wqqZ ZCLJ6Gc+3jFx86atgMIP9idH1HEs1YsHf1t6Y3HluyKyU8x/ba6sbKUhrUicKo1CI/Ku X3Jjja9gzBF2zkslabsS/vSZkefgJLmcRruPQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:date:message-id:cc:to:mime-version; bh=q4/FPv+R9qG+a+ldls3rDzHh0M2ufXNgfUbQdpgsQws=; b=MoUaGZ4iVrygZ1QC9oFOlQHa8kpeGBnoAaOMtT8WyZVd01+5J3I3CGbN7XTrLXv/SG imexR6QIdvBiSK0Pib2i/EglVU6J0nOfBwSNi25k5+p0wfK8/8ZWG7uwe99nlyA8gQ19 lmJJpXXRx5YxGVOg/+W4gvqhlyFJcQBjifAWGS+Wia7O36pasteRlJpiS/tA5tHtx+3t aFF1JWjoQygsseGh5U9fOafMaUrpXfbSFp4iyL+gOzLquslCpjb5PlixIxYz3QxN7MIC t4DWCugtZMZu7VI3KN3w7B3tHI1MOpkwHMNkXJc+MPwaPKJ2tf+c01kQZNnAca1+Rl6/ 1Hiw== X-Gm-Message-State: AOPr4FU4fWovQ+5bcOiaFQgzqx0IQrWUvJhGdQEzRd2IjTRAsZeld2TfX1sZSEdy3JmPxeDg X-Received: by 10.157.49.118 with SMTP id v51mr1217347otd.97.1462282429460; Tue, 03 May 2016 06:33:49 -0700 (PDT) Received: from ?IPv6:2602:306:349e:2d10:2d1a:ffbb:59b:f52c? ([2602:306:349e:2d10:2d1a:ffbb:59b:f52c]) by smtp.gmail.com with ESMTPSA id li8sm1039807obb.27.2016.05.03.06.33.48 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 03 May 2016 06:33:48 -0700 (PDT) From: Jacob Childress Content-Type: multipart/signed; boundary="Apple-Mail=_488EC9EF-515E-4478-BAEC-679942B8FD49"; protocol="application/pkcs7-signature"; micalg=sha1 Date: Tue, 3 May 2016 08:33:46 -0500 Message-Id: To: scim@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [scim] UnboundID server ready for testing X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 May 2016 13:33:51 -0000 --Apple-Mail=_488EC9EF-515E-4478-BAEC-679942B8FD49 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, UnboundID=E2=80=99s SCIM v2 test service provider is available. Please = find config information in the shared service provider details folder = and email me or Bjorn for credentials. Thanks, Jacob= --Apple-Mail=_488EC9EF-515E-4478-BAEC-679942B8FD49 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIK/jCCBRQw ggP8oAMCAQICECMYctDB6ONN3G9HF3Z0MSUwDQYJKoZIhvcNAQELBQAwdTELMAkGA1UEBhMCSUwx FjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTAeFw0xNjAyMDgx ODMyNTVaFw0xNzAyMDgxODMyNTVaMFYxJjAkBgNVBAMMHWphY29iLmNoaWxkcmVzc0B1bmJvdW5k aWQuY29tMSwwKgYJKoZIhvcNAQkBFh1qYWNvYi5jaGlsZHJlc3NAdW5ib3VuZGlkLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJewTMvBZhpY8tvb1nBUC/hVrYFweNWYCWGijg+9 ci8dImMqathoUn/M1W1QNj2GiUL72tMTKUWeI1vaiNULYL71g5xAHezrDPm/DD33jn1Zt/GS5YZQ kchUwE1yQ4WurK1eyyM7XEmVf7kvPtpIYRx3Ec9oTy0hLTm/W+Wdo8fsYNpuiIowHqSTtC66W4kJ CCJ5JRK6majP8vnrgUAuDoV7O+vJc2foEBD+QPFT7jiKCc3WdUil7OzZrGvMtpYrQdCLibaCZPCm odT/WtRAgtxm5RLJO7j5s7WvtNcwxwP4E1T3sGnvrFgyrjwMudhDPFvTHRt3B+eXw7w9j4DOgQ8C AwEAAaOCAb0wggG5MAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQw CQYDVR0TBAIwADAdBgNVHQ4EFgQUzVGqKgBx352UX7jg2b+xiEy+yBwwHwYDVR0jBBgwFoAUJIFs OWG+SQ+PtxtGK8kotSdIbWgwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz L3NjYS5jbGllbnQxLmNydDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zY2EtY2xpZW50MS5jcmwwKAYDVR0RBCEwH4EdamFjb2IuY2hpbGRyZXNzQHVuYm91bmRpZC5j b20wIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMEYGA1UdIAQ/MD0wOwYLKwYB BAGBtTcBAgQwLDAqBggrBgEFBQcCARYeaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5MA0G CSqGSIb3DQEBCwUAA4IBAQCwAmbmyuE3nn7/qOl8cx+DhSgTHdsROiWIZNNOH8R0qKez6/Ef/OJ4 WlsvljMVjjd5/qZ9D/myMQyi+hI6rPwXPjuQuVe3gFWDWjG+bTl/aeYU31DxcANak1/erxPhMZxd 5EAHDo2Ibi+6kAOfibVnoqMUg8R+/6V16r3nbNgc+imEEAGKazGUIO9xseehz1YxMXV7lXUInFQu Puy3VMfQQNP92CWecmr6slp4hB43h6fnKs7z1i17797oqRdQrx6oy0/T825sDZLEK9Wtd0tP2mt5 z3qJQtIK5W2qEiv9/k4IksYBf4sE47N/DVG5vu2VBov+XEPaCNpB2ldDkJZSMIIF4jCCA8qgAwIB AgIQa6eKfQrXiNZRCvlZ5Oe04TANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2ln bmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTUxMjE2 MDEwMDA1WhcNMzAxMjE2MDEwMDA1WjB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMT GlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX3a98OifYP2W4L921tfrh4bdcC1Ga+YJKy7V3nYNewJHnzMlBsK0Hb8Dm4Wo3FZpylcYa1M JGT10QMGWaLER3xCIuRR+8eklf/EqeZWRLojJ7zBRtjMywPOCelrOU+DX12dKp+Ez4J6919rz1Uu dTO1GvZyCYJ/I7062uHsskM8b7gPxmcCoO1UHwwpgkvpCArJWGFoFzjLdsZbErJcS3HtAhlkbE/B KTMrdYg35Uo12SLBO5tbk8h2imbKTC8iMs+pskrvI/AVlh6QoTTXk6xboVX6zgMgzxSVVLymQiyg YYm0y5aMsvi2raFhC643SOGvErWWPPnSEfbeAD1xswIDAQABo4IBZDCCAWAwDgYDVR0PAQH/BAQD AgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDASBgNVHRMBAf8ECDAGAQH/AgEAMDIG A1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nmc2NhLmNybDBmBggrBgEF BQcBAQRaMFgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTAwBggrBgEFBQcw AoYkaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvY2EuY3J0MB0GA1UdDgQWBBQkgWw5Yb5J D4+3G0YrySi1J0htaDAfBgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jA/BgNVHSAEODA2 MDQGBFUdIAAwLDAqBggrBgEFBQcCARYeaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5MA0G CSqGSIb3DQEBCwUAA4ICAQCL4/eH7AGLhK0PAQJbnOEjJyMEvTTwcAJuUh/bodjQl06u4putYOxd SyIjSP/sKt+31LmjG8+IO1WqykE4H/Lm7NKezWVnCHuwb3ptgFmlwbMbGkU2MOZBtwzfKXdYUhFL haE2uw5jXhXvLYitQay962wP5uPI6eAIhV4L8aaya1u4s7MnrTq0Rz25FuGNO79vTHYWj797tSRC 8rM16js4yGKOLFpQvIg0F8IElv57b1stp+C7omqM5Qn15dePbSnqr8Jb65WtmJJbnv6rlqfY/aLu E/zmNAlzLmPgfMDStKIXdg+EoYBZTEo8wBUaBxihfNbJ069ndQOxMNNqBelEMgpAtmjTbCuXFjqI wWq+XOx6ZV/Wh2FAmaLsSHlNvEjjSQMZwE4EeHCdo66ZmEs/5JYlCeOkulKVQ6P3m5/XOj2jP17Q 2AgmjP+11+sHN7PvrG0OwrQp9QMe3X+rn0G8MjtFfqBWvR9CgLIxzM3MJNxFdgdjS2rYnShP5uxv qwfZvhZVYCIkqdJhpYON0DvSodfiar0wiM79mySZJjzC0CTbiisBzS/BeBhqeo2wFfli/iw3hn1X KvAx0ty6w/scmBF0AYqmRHYj1TjMSw0lAl7AztLglqWjUPI+sukvadMRPxmtKXlS2nVR4an/Z16i msZ69+fFYH68c1CK7zmjozGCA04wggNKAgEBMIGJMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEj MCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGllbnQgQ0ECECMYctDB6ONN3G9HF3Z0MSUwCQYF Kw4DAhoFAKCCAZkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYw NTAzMTMzMzQ3WjAjBgkqhkiG9w0BCQQxFgQUEM4Tevb+DMf0yDhvgfQp8rQuAnQwgZoGCSsGAQQB gjcQBDGBjDCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UE CxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENs YXNzIDEgQ2xpZW50IENBAhAjGHLQwejjTdxvRxd2dDElMIGcBgsqhkiG9w0BCRACCzGBjKCBiTB1 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20g Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50 IENBAhAjGHLQwejjTdxvRxd2dDElMA0GCSqGSIb3DQEBAQUABIIBAHUMX3RPKyvR0lm0pG6csIct jtM7aLgGEa0KuaIOcfkv692kAV+YClDgHQfNYOX6Lw46XiJwDsNzN7EhomIV1cP9D1z9uXNm7zjM T1EsBkWGH81FalSOeJ339arP4ZLjPb2+BKP2tbVzduFfb5ji57lho1X20cQ5qZ5aKN/0yzTTRmPi tanNkIDek2zPz/oqq2Lst6X7ENv4L58iNjbVascYSLO5k0nCzJlrfX0BDicULzqSjYSjs5RS63Pv jLDStVb3DqdPwfEgZXw6zeVc4iJ1fBWR+mqbgvHRVtIsXPeH/6HVol1rrtHdEaRhp+hHz+ex0tL6 qKo/YM3mLgR+ENgAAAAAAAA= --Apple-Mail=_488EC9EF-515E-4478-BAEC-679942B8FD49-- From nobody Tue May 3 10:25:22 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6270912DB23 for ; Tue, 3 May 2016 10:25:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.196 X-Spam-Level: X-Spam-Status: No, score=-5.196 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s52-7-z-kZYm for ; Tue, 3 May 2016 10:25:18 -0700 (PDT) Received: from tr21g10.aset.psu.edu (tr21g10.aset.psu.edu [146.186.149.132]) by ietfa.amsl.com (Postfix) with ESMTP id CDBA212D9CF for ; Tue, 3 May 2016 10:23:32 -0700 (PDT) Received: from ucs22.ait.psu.edu (ucs22.ait.psu.edu [128.118.73.60]) by tr21g10.aset.psu.edu (8.14.3/8.14.3) with ESMTP id u43HNVno3375302 for ; Tue, 3 May 2016 13:23:31 -0400 Date: Tue, 3 May 2016 13:23:30 -0400 (EDT) From: SHAWN E SMITH To: scim@ietf.org Message-ID: <905567268.6491641.1462296210861.JavaMail.zimbra@psu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [130.203.78.31] X-Mailer: Zimbra 8.6.0_GA_1194 (ZimbraWebClient - FF46 (Linux)/8.6.0_GA_1194) Thread-Topic: Scim Extensions Question Thread-Index: m3tc4iuM01Si2nD5xSYGfcB547zjlg== X-Virus-Scanned: by amavisd-new Archived-At: Subject: [scim] Scim Extensions Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 May 2016 17:25:21 -0000 I apologize if this is the wrong list to send this to, but... I'm looking for some advice. I know the question of extensions has bounced around a bit but I'm still unclear on how to deal with extended values for base types. For instance, in our payroll system we have the notion of validation of an address and the validating document. Because we can have multiple addresses for multiple purposes tying those extended fields back elements to the correct base object is a bit of a challenge. I'd like a declarative way to do it rather than relying on order or something else easy to break and hard to understand. For others who have gone through the exercise, can you please share how you dealt with this? Thanks in advance, Shawn Any fool can write code that a computer can understand. Good programmers write code that humans can understand. --Martin Fowler Shawn Smith Director of Software Engineering Administrative Information Services 814-321-5227 ses44@psu.edu From nobody Tue May 3 11:16:12 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C5A612D0B7 for ; Tue, 3 May 2016 11:16:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.216 X-Spam-Level: X-Spam-Status: No, score=-5.216 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id avQ3l9GJKjx4 for ; Tue, 3 May 2016 11:16:08 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50EB412D87D for ; Tue, 3 May 2016 11:15:28 -0700 (PDT) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id u43IFRqX009645 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 3 May 2016 18:15:27 GMT Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id u43IFQdi014666 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 3 May 2016 18:15:27 GMT Received: from abhmp0019.oracle.com (abhmp0019.oracle.com [141.146.116.25]) by userv0122.oracle.com (8.14.4/8.14.4) with ESMTP id u43IFPkJ008351; Tue, 3 May 2016 18:15:26 GMT Received: from [10.0.1.21] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 03 May 2016 11:15:25 -0700 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/alternative; boundary="Apple-Mail=_E8805C8A-6A90-4D5A-9422-A72A2E12C742" From: Phil Hunt In-Reply-To: <905567268.6491641.1462296210861.JavaMail.zimbra@psu.edu> Date: Tue, 3 May 2016 11:15:23 -0700 Message-Id: References: <905567268.6491641.1462296210861.JavaMail.zimbra@psu.edu> To: SHAWN E SMITH X-Mailer: Apple Mail (2.3124) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Cc: scim@ietf.org Subject: Re: [scim] Scim Extensions Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 May 2016 18:16:11 -0000 --Apple-Mail=_E8805C8A-6A90-4D5A-9422-A72A2E12C742 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This isn=E2=80=99t the first time this has come up (adding = sub-attributes to core schema attributes). To do this would require a new SCIM specification extending the core = schema. Most likely it would be a working group document. This type of = scenario can=E2=80=99t be handled within the current formal extension = mechanism. There is a set of attributes that seem to be common that we could add to = the complex type (see Sec 2.4 of RFC7643). These attributes might = include: * Verified on * Verified by * Verification method * Level of confidence * Valid until * Etc. There are real questions to discuss on the list. =20 * Should these types attributes be shared cross-domain? - depends on how = you interpret =E2=80=9Cverified=E2=80=9D - consensus on this could be = tricky. E.g. by who and for whom and for what purpose? =20 * Are these values meaningful across domain? =20 * What about simple attributes? Do we want to allow sub-attributes of = these? I would like to avoid creating a new extension mechanism that permits = new sub-attributes to be added to existing complex attributes or simple = attributes. I believe this will take SCIM into a much higher level of = complexity (e.g. deeply nested schema or other methods). What we have = now is a compromise between functionality and simplicity that was = negotiated in the working group at some length.=20 What can service providers do for now? Many have a need that is = localized only. If you want to proceed without an expectation of = inter-op of the new attributes while still supporting general = inter-operability, here is my interpretation of the specs... One of the foundational components of SCIM protocol is =E2=80=9Crobustness= =E2=80=9D. This means that service providers and clients should accept = (and ignore) data they do not care about. In theory while the spec does = not permit it, I don=E2=80=99t see a problem with service providers = adding these attributes as if they were part of the core schema. If = they choose to extend the standard core schema as discussed above, = service providers should: * List the new attributes in the core schema as part of the schemas = endpoint (so a client that supports the attributes can know they are = supported) * Service providers should not require clients to support these = attributes, nor should they throw errors if clients assert them. These types of =E2=80=9Cadditive" changes are probably going to work = well. I would *strongly* avoid the temptation to rename or change the = attribute type of standardized attributes. I urge caution here. We won=E2=80=99t know how well the robust features = work in SCIM2 in practice until after we get through the interop testing = this month. My hope is we=E2=80=99ll have some real world data on how = well non-standard issues such as this are handled in the real world. I = am aware of a couple of implementations that have this issue now. I am = curious to see the results of support for non-standard extensions. Phil @independentid www.independentid.com = phil.hunt@oracle.com = > On May 3, 2016, at 10:23 AM, SHAWN E SMITH wrote: >=20 > I apologize if this is the wrong list to send this to, but... >=20 > I'm looking for some advice. I know the question of extensions has = bounced around a bit but I'm still unclear on how to deal with extended = values for base types. >=20 > For instance, in our payroll system we have the notion of validation = of an address and the validating document. Because we can have multiple = addresses for multiple purposes tying those extended fields back = elements to the correct base object is a bit of a challenge. I'd like a = declarative way to do it rather than relying on order or something else = easy to break and hard to understand. >=20 > For others who have gone through the exercise, can you please share = how you dealt with this? >=20 > Thanks in advance, > Shawn >=20 > Any fool can write code that a computer can understand. Good = programmers write code that humans can understand. > --Martin Fowler=20 >=20 > Shawn Smith > Director of Software Engineering > Administrative Information Services > 814-321-5227 > ses44@psu.edu >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_E8805C8A-6A90-4D5A-9422-A72A2E12C742 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 This isn=E2=80=99t the first time this has come up (adding = sub-attributes to core schema attributes).

To do this would require a new SCIM = specification extending the core schema.  Most likely it would be a = working group document. This type of scenario can=E2=80=99t be handled = within the current formal extension mechanism.

There is a set of attributes that seem = to be common that we could add to the complex type (see Sec 2.4 of = RFC7643).  These attributes might include:
* = Verified on
* Verified by
* = Verification method
* Level of confidence
* Valid until
* Etc.

There are real questions = to discuss on the list.  
* Should these types = attributes be shared cross-domain? - depends on how you interpret = =E2=80=9Cverified=E2=80=9D - consensus on this could be tricky. E.g. by = who and for whom and for what purpose?  
* Are = these values meaningful across domain?  
* = What about simple attributes? Do we want to allow sub-attributes of = these?

I would = like to avoid creating a new extension mechanism that permits new = sub-attributes to be added to existing complex attributes or simple = attributes. I believe this will take SCIM into a much higher level of = complexity (e.g. deeply nested schema or other methods). What we have = now is a compromise between functionality and simplicity that was = negotiated in the working group at some length. 

What can service = providers do for now? Many have a need that is localized only. If you = want to proceed without an expectation of inter-op of the new attributes = while still supporting general inter-operability, here is my = interpretation of the specs...

One of the foundational components of = SCIM protocol is =E2=80=9Crobustness=E2=80=9D. This means that service = providers and clients should accept (and ignore) data they do not care = about.  In theory while the spec does not permit it, I don=E2=80=99t = see a problem with service providers adding these attributes as if they = were part of the core schema.  If they choose to extend the = standard core schema as discussed above, service providers = should:
*  List the new attributes in the core = schema as part of the schemas endpoint (so a client that supports the = attributes can know they are supported)
* =  Service providers should not require clients to support these = attributes, nor should they throw errors if clients assert = them.

These = types of =E2=80=9Cadditive" changes are probably going to work well. I = would *strongly* avoid the temptation to rename or change the attribute = type of standardized attributes.

I urge caution here. We won=E2=80=99t = know how well the robust features work in SCIM2 in practice until after = we get through the interop testing this month. My hope is we=E2=80=99ll = have some real world data on how well non-standard issues such as this = are handled in the real world. I am aware of a couple of implementations = that have this issue now. I am curious to see the results of support for = non-standard extensions.




On May 3, 2016, at 10:23 AM, SHAWN E SMITH <ses44@psu.edu> = wrote:

I apologize if this is the wrong list to send this to, = but...

I'm looking for some advice.  I = know the question of extensions has bounced around a bit but I'm still = unclear on how to deal with extended values for base types.

For instance, in our payroll system we have = the notion of validation of an address and the validating document. =  Because we can have multiple addresses for multiple purposes tying = those extended fields back elements to the correct base object is a bit = of a challenge.  I'd like a declarative way to do it rather than = relying on order or something else easy to break and hard to = understand.

For others who have gone = through the exercise, can you please share how you dealt with this?

Thanks in advance,
Shawn

Any fool can write code that a computer can = understand. Good programmers write code that humans can understand.
--Martin Fowler

Shawn Smith
Director of Software Engineering
Administrative = Information Services
814-321-5227
ses44@psu.edu

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

= --Apple-Mail=_E8805C8A-6A90-4D5A-9422-A72A2E12C742-- From nobody Tue May 3 11:35:14 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E533912D862 for ; Tue, 3 May 2016 11:35:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.195 X-Spam-Level: X-Spam-Status: No, score=-5.195 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DfSMYAG41gaB for ; Tue, 3 May 2016 11:35:09 -0700 (PDT) Received: from tr21g12.aset.psu.edu (tr21g12.aset.psu.edu [146.186.149.142]) by ietfa.amsl.com (Postfix) with ESMTP id 1730212D611 for ; Tue, 3 May 2016 11:35:09 -0700 (PDT) Received: from ucs22.ait.psu.edu (ucs22.ait.psu.edu [128.118.73.60]) by tr21g12.aset.psu.edu (8.14.3/8.14.3) with ESMTP id u43IZ7CN1814734; Tue, 3 May 2016 14:35:07 -0400 Date: Tue, 3 May 2016 14:35:07 -0400 (EDT) From: SHAWN E SMITH To: Phil Hunt Message-ID: <2074867328.6908140.1462300507413.JavaMail.zimbra@psu.edu> In-Reply-To: References: <905567268.6491641.1462296210861.JavaMail.zimbra@psu.edu> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_6908139_82154229.1462300507411" X-Originating-IP: [128.118.110.244] X-Mailer: Zimbra 8.6.0_GA_1194 (ZimbraWebClient - FF46 (Linux)/8.6.0_GA_1194) Thread-Topic: Scim Extensions Question Thread-Index: 2HAQTFVu8sSMfG/9hAkwqJzqmC097Q== X-Virus-Scanned: by amavisd-new Archived-At: Cc: scim@ietf.org Subject: Re: [scim] Scim Extensions Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 May 2016 18:35:12 -0000 ------=_Part_6908139_82154229.1462300507411 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thanks much for the feedback. We'd hoped to join the interop but the schedu= le caught up with us.=20 I agree that modifying the core complex items is a bad idea. I like the pur= ity and interoperability it provides. What I've done so far is added an ind= ex to the core elements that is not included in the schema though it is mar= shalled out in the JSON. I'm using that same index in the extensions to tie= the values together. If folks need it they can access it, if not they can = ignore it. Because the spec says that consumers should ignore what they don= 't understand, I think we still meet the compliance requirements.=20 Again, thanks for taking the time to respond.=20 Shawn=20 "The programmer =E2=80=A6 works only slightly removed from pure thought-stu= ff.=20 He builds his castles in the air, from air, creating by exertion of the ima= gination."=20 =E2=80=94 Fred Brooks=20 Shawn Smith=20 Director of Software Engineering=20 Administrative Information Services=20 Penn State University=20 814-321-5227=20 ses44@psu.edu=20 From: "Phil Hunt" =20 To: "SHAWN E SMITH" =20 Cc: scim@ietf.org=20 Sent: Tuesday, May 3, 2016 2:15:23 PM=20 Subject: Re: [scim] Scim Extensions Question=20 This isn=E2=80=99t the first time this has come up (adding sub-attributes t= o core schema attributes).=20 To do this would require a new SCIM specification extending the core schema= . Most likely it would be a working group document. This type of scenario c= an=E2=80=99t be handled within the current formal extension mechanism.=20 There is a set of attributes that seem to be common that we could add to th= e complex type (see Sec 2.4 of RFC7643). These attributes might include:=20 * Verified on=20 * Verified by=20 * Verification method=20 * Level of confidence=20 * Valid until=20 * Etc.=20 There are real questions to discuss on the list.=20 * Should these types attributes be shared cross-domain? - depends on how yo= u interpret =E2=80=9Cverified=E2=80=9D - consensus on this could be tricky.= E.g. by who and for whom and for what purpose?=20 * Are these values meaningful across domain?=20 * What about simple attributes? Do we want to allow sub-attributes of these= ?=20 I would like to avoid creating a new extension mechanism that permits new s= ub-attributes to be added to existing complex attributes or simple attribut= es. I believe this will take SCIM into a much higher level of complexity (e= .g. deeply nested schema or other methods). What we have now is a compromis= e between functionality and simplicity that was negotiated in the working g= roup at some length.=20 What can service providers do for now? Many have a need that is localized o= nly. If you want to proceed without an expectation of inter-op of the new a= ttributes while still supporting general inter-operability, here is my inte= rpretation of the specs...=20 One of the foundational components of SCIM protocol is =E2=80=9Crobustness= =E2=80=9D. This means that service providers and clients should accept (and= ignore) data they do not care about. In theory while the spec does not per= mit it, I don=E2=80=99t see a problem with service providers adding these a= ttributes as if they were part of the core schema. If they choose to extend= the standard core schema as discussed above, service providers should:=20 * List the new attributes in the core schema as part of the schemas endpoin= t (so a client that supports the attributes can know they are supported)=20 * Service providers should not require clients to support these attributes,= nor should they throw errors if clients assert them.=20 These types of =E2=80=9Cadditive" changes are probably going to work well. = I would *strongly* avoid the temptation to rename or change the attribute t= ype of standardized attributes.=20 I urge caution here. We won=E2=80=99t know how well the robust features wor= k in SCIM2 in practice until after we get through the interop testing this = month. My hope is we=E2=80=99ll have some real world data on how well non-s= tandard issues such as this are handled in the real world. I am aware of a = couple of implementations that have this issue now. I am curious to see the= results of support for non-standard extensions.=20 Phil=20 @independentid=20 www.independentid.com=20 phil.hunt@oracle.com=20 On May 3, 2016, at 10:23 AM, SHAWN E SMITH < ses44@psu.edu > wrote:=20 I apologize if this is the wrong list to send this to, but...=20 I'm looking for some advice. I know the question of extensions has bounced = around a bit but I'm still unclear on how to deal with extended values for = base types.=20 For instance, in our payroll system we have the notion of validation of an = address and the validating document. Because we can have multiple addresses= for multiple purposes tying those extended fields back elements to the cor= rect base object is a bit of a challenge. I'd like a declarative way to do = it rather than relying on order or something else easy to break and hard to= understand.=20 For others who have gone through the exercise, can you please share how you= dealt with this?=20 Thanks in advance,=20 Shawn=20 Any fool can write code that a computer can understand. Good programmers wr= ite code that humans can understand.=20 --Martin Fowler=20 Shawn Smith=20 Director of Software Engineering=20 Administrative Information Services=20 814-321-5227=20 ses44@psu.edu=20 _______________________________________________=20 scim mailing list=20 scim@ietf.org=20 https://www.ietf.org/mailman/listinfo/scim=20 ------=_Part_6908139_82154229.1462300507411 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Thanks much for the feedback.  We'd ho= ped to join the interop but the schedule caught up with us.
<= br data-mce-bogus=3D"1">
I agree that modifying the core complex = items is a bad idea.  I like the purity and interoperability it provid= es.  What I've done so far is added an index to the core elements that= is not included in the schema though it is marshalled out in the JSON.&nbs= p; I'm using that same index in the extensions to tie the values together.&= nbsp; If folks need it they can access it, if not they can ignore it. =   Because the spec says that consumers should ignore what they don't u= nderstand, I think we still meet the compliance requirements.

Again, thanks for= taking the time to respond.

Shawn

"The programmer =E2=80=A6 works only slig= htly removed from pure thought-stuff.
He builds his castles in the air, = from air, creating by exertion of the imagination."
=E2=80=94 Fred Brook= s

Shawn Smith
Director of Software Engineering
Administrative = Information Services
Penn State University
814-321-5227
ses44@psu.= edu

From: "Phil Hunt" <phil.hunt@oracle.com>
<= b>To: "SHAWN E SMITH" <ses44@psu.edu>
Cc: scim@ietf.org=
Sent: Tuesday, May 3, 2016 2:15:23 PM
Subject: Re: [sc= im] Scim Extensions Question

This isn=E2=80=99t the first time this has come up (adding sub-attribut= es to core schema attributes).

To do this would require a new SCIM specification extending the cor= e schema.  Most likely it would be a working group document. This type= of scenario can=E2=80=99t be handled within the current formal extension m= echanism.

There i= s a set of attributes that seem to be common that we could add to the compl= ex type (see Sec 2.4 of RFC7643).  These attributes might include:
* Verified on
* Verified by
* Verification method
* Level of confiden= ce
* Valid until
* Etc.

There are real questions t= o discuss on the list.  
* Should these types att= ributes be shared cross-domain? - depends on how you interpret =E2=80=9Cver= ified=E2=80=9D - consensus on this could be tricky. E.g. by who and for who= m and for what purpose?  
* Are these values mean= ingful across domain?  
* What about simple attri= butes? Do we want to allow sub-attributes of these?
I would like to avoid creating a new ext= ension mechanism that permits new sub-attributes to be added to existing co= mplex attributes or simple attributes. I believe this will take SCIM into a= much higher level of complexity (e.g. deeply nested schema or other method= s). What we have now is a compromise between functionality and simplicity t= hat was negotiated in the working group at some length. 

What can service providers do = for now? Many have a need that is localized only. If you want to proceed wi= thout an expectation of inter-op of the new attributes while still supporti= ng general inter-operability, here is my interpretation of the specs...

One of the foundatio= nal components of SCIM protocol is =E2=80=9Crobustness=E2=80=9D. This means= that service providers and clients should accept (and ignore) data they do= not care about.  In theory while the spec does not permit it, I don= =E2=80=99t see a problem with service providers adding these attributes as = if they were part of the core schema.  If they choose to extend the st= andard core schema as discussed above, service providers should:
*  List the new attributes in the core schema as part of th= e schemas endpoint (so a client that supports the attributes can know they = are supported)
*  Service providers should not re= quire clients to support these attributes, nor should they throw errors if = clients assert them.

These types of =E2=80=9Cadditive" changes are probably going to work = well. I would *strongly* avoid the temptation to rename or change the attri= bute type of standardized attributes.

<= /div>
I urge caution here. We won=E2=80=99t know how well th= e robust features work in SCIM2 in practice until after we get through the = interop testing this month. My hope is we=E2=80=99ll have some real world d= ata on how well non-standard issues such as this are handled in the real wo= rld. I am aware of a couple of implementations that have this issue now. I = am curious to see the results of support for non-standard extensions.
=

Phil

=
@independentid
www.independentid.com
phil.hunt@oracle.com


<= br class=3D"Apple-interchange-newline">

On May 3, 2016, = at 10:23 AM, SHAWN E SMITH <ses44@psu.edu> wrote:

I apologize if this is the= wrong list to send this to, but...

I'm lookin= g for some advice.  I know the question of extensions has bounced arou= nd a bit but I'm still unclear on how to deal with extended values for base= types.

For instance, in our payroll system we= have the notion of validation of an address and the validating document. &= nbsp;Because we can have multiple addresses for multiple purposes tying tho= se extended fields back elements to the correct base object is a bit of a c= hallenge.  I'd like a declarative way to do it rather than relying on = order or something else easy to break and hard to understand.

For others who have gone through the exercise, can you plea= se share how you dealt with this?

Thanks in ad= vance,
Shawn

Any fool can write = code that a computer can understand. Good programmers write code that human= s can understand.
--Martin Fowler

Shawn Smith
Director of Software Engineering
Administrative Information Services
814-321-5227
ses44@psu.= edu

______________________________________= _________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim


------=_Part_6908139_82154229.1462300507411-- From nobody Thu May 5 09:49:55 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 315E612D6E5 for ; Thu, 5 May 2016 09:49:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sailpoint.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q_Jtd-XjHyC4 for ; Thu, 5 May 2016 09:49:50 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0101.outbound.protection.outlook.com [207.46.100.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0B5F12D6CD for ; Thu, 5 May 2016 09:49:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sailpoint.onmicrosoft.com; s=selector1-sailpoint-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=aSCwyhxeqBvMhfs1p7a52UnMapg6a2Tu8bfILq1Z4IE=; b=DyJEiNyFR0uh8B8KoPQJt8b/VTR66UyQmSp3Wdk89oDFBEnF7bf4qoRKI5UNHrK/v7hLQlEtxTdu9o9d+f4xEzSJ9DxlPm/s8Rh23eXBGPhZBuh1YjO8jyrNoygEGOUW9LM+EnYnZUVqb1FTzh993zlHYdjxQ9u5qcGEy5oBVgw= Received: from CY1PR04MB2363.namprd04.prod.outlook.com (10.167.10.143) by CY1PR04MB2076.namprd04.prod.outlook.com (10.166.191.146) with Microsoft SMTP Server (TLS) id 15.1.485.9; Thu, 5 May 2016 16:49:49 +0000 Received: from CY1PR04MB2363.namprd04.prod.outlook.com ([10.167.10.143]) by CY1PR04MB2363.namprd04.prod.outlook.com ([10.167.10.143]) with mapi id 15.01.0485.011; Thu, 5 May 2016 16:49:49 +0000 From: Kelly Grizzle To: "scim@ietf.org" Thread-Topic: SailPoint SCIM server is available for interop Thread-Index: AdGm7ZfjdiF7z9VTTXq3WN7x8sPphA== Date: Thu, 5 May 2016 16:49:49 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 21D98B8400C00421D98CD1 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=sailpoint.com; x-originating-ip: [2605:6000:0:8::f:9] x-ms-office365-filtering-correlation-id: bcad0ff9-f9ef-49ce-24b3-08d3750545f2 x-microsoft-exchange-diagnostics: 1; CY1PR04MB2076; 5:D5xyBd6VGdibhbxKR4YxUvjL/Akj/2MJQHwK8D/qPedB5HxPhJZ8dDLPaoQp0sv5FK9T6TFsc6w/oNCxW3sOAS9a0IZVkDmzpBhKAwLS7FZbB8lOe3dbpBoXNOUQEKoSZlU1obiKlRASQ/SQn/nIwA==; 24:I81UKCzmAPjb0SYEIddMkuOgiVT7pHTU3K99gfLbTUUume9BTw7URTr5bkVDnAzMaM3ZCKM4xPpB9onFMT2ItWVNhAM3L9CfFlxRy1HauSs=; 7:xMVD24A+O2WnZtZ75F6uz45DDF2ydNnQwQo1FXlJqr023BQkKbGfzzyD3fPZq5GGr19Sk+KHnPam0M6cpyAYKXY4H8tjS75MFUW+7uie4d9Wsd+6RezrYU9tkVJ4NBMhET7rp5ANH5rybPs1NgzkS9fnoIniwRIYJA1Fvitmt53ZRC/6TjUA4xigrz2ZVO3L x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR04MB2076; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(9101521098)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001); SRVR:CY1PR04MB2076; BCL:0; PCL:0; RULEID:; SRVR:CY1PR04MB2076; x-forefront-prvs: 0933E9FD8D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(77096005)(110136002)(5008740100001)(4001430100002)(107886002)(122556002)(450100001)(15975445007)(4326007)(92566002)(16236675004)(76576001)(189998001)(5004730100002)(99286002)(229853001)(19580395003)(790700001)(19617315012)(74316001)(1220700001)(6116002)(102836003)(54356999)(1730700002)(3280700002)(2351001)(2900100001)(50986999)(2906002)(5630700001)(2501003)(81166005)(575784001)(5003600100002)(87936001)(5002640100001)(11100500001)(586003)(8936002)(9686002)(5640700001)(86362001)(10400500002)(19300405004)(3660700001)(5002510100001)(19625215002)(33656002)(3826002)(15940465004); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR04MB2076; H:CY1PR04MB2363.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY1PR04MB23632D5186970E6C7880AF3CE27C0CY1PR04MB2363namp_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 05 May 2016 16:49:49.5811 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR04MB2076 Archived-At: Cc: Jeremy Southerland , Danny Feng , Duke Pham , Chris Annino , Marc Schulz Subject: [scim] SailPoint SCIM server is available for interop X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 May 2016 16:49:53 -0000 --_000_CY1PR04MB23632D5186970E6C7880AF3CE27C0CY1PR04MB2363namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The service provider information is available here - https://docs.google.co= m/document/d/1M0rj0QT8q5FwFOWvtbdqagHRKm0DFzG2K2QwRqnYCao/edit?usp=3Dsharin= g. SCIM endpoint: https://sciminterop.sailpoint.com/identityiq/scim/v2/ OAuth endpoint: https://sciminterop.sailpoint.com/identityiq/oauth2/token Please contact me for credentials. --Kelly --_000_CY1PR04MB23632D5186970E6C7880AF3CE27C0CY1PR04MB2363namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The service provider information is available here -= https://docs.google.com/document/d/1M0r= j0QT8q5FwFOWvtbdqagHRKm0DFzG2K2QwRqnYCao/edit?usp=3Dsharing.=

 

SCIM endpoint: https://sciminterop.sailpoint.com/identityiq/scim/v2/=

OAuth endpoint: https://sciminterop.sailpoint.com/identityiq/oauth2/token

 

Please contact me for credentials.

 

--Kelly

--_000_CY1PR04MB23632D5186970E6C7880AF3CE27C0CY1PR04MB2363namp_-- From nobody Tue May 10 12:46:08 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51BDD12D581 for ; Tue, 10 May 2016 10:51:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.216 X-Spam-Level: X-Spam-Status: No, score=-5.216 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UBMi3vh-zE6o for ; Tue, 10 May 2016 10:51:02 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE6A112D58B for ; Tue, 10 May 2016 10:51:02 -0700 (PDT) Received: from userv0021.oracle.com (userv0021.oracle.com [156.151.31.71]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id u4AHosie032483 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 10 May 2016 17:50:55 GMT Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by userv0021.oracle.com (8.13.8/8.13.8) with ESMTP id u4AHorKi022082 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 10 May 2016 17:50:53 GMT Received: from abhmp0004.oracle.com (abhmp0004.oracle.com [141.146.116.10]) by userv0121.oracle.com (8.13.8/8.13.8) with ESMTP id u4AHooD2003034; Tue, 10 May 2016 17:50:51 GMT Received: from [10.0.1.21] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 10 May 2016 10:50:49 -0700 Content-Type: multipart/alternative; boundary="Apple-Mail=_563943A1-5EEA-4285-B0C9-D603530A90D3" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Phil Hunt In-Reply-To: <20160415202027.AC0E918000B@rfc-editor.org> Date: Tue, 10 May 2016 10:50:46 -0700 Message-Id: References: <20160415202027.AC0E918000B@rfc-editor.org> To: RFC Errata System X-Mailer: Apple Mail (2.3124) X-Source-IP: userv0021.oracle.com [156.151.31.71] Archived-At: X-Mailman-Approved-At: Tue, 10 May 2016 12:46:07 -0700 Cc: ben@nostrum.com, aamelnikov@fastmail.fm, morteza.ansari@cisco.com, alissa@cooperw.in, leifj@sunet.se, scim@ietf.org, Kelly Grizzle , zmeeagain@gmail.com, erik.wahlstrom@nexusgroup.com, Morteza Ansari , Chuck Mortimore Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4670) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2016 17:51:05 -0000 --Apple-Mail=_563943A1-5EEA-4285-B0C9-D603530A90D3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 After some review, I believe this errata report is valid, however the = corrective text does not fully address the issue. =20 The original text mixed the notion of order or processing vs. order of = precedence. I have simplified the introductory sentence and changed the = order of items to reflect the text. I believe this correction reflects = the way people have implemented the specification. It should say: ------- Filters MUST be evaluated using the following order of precedence: 1. Attribute operators (i.e. eq ne co sw ew pr gt ge lt le) 2. Grouping operators 3. Logical operators - where =E2=80=9Cnot=E2=80=9D takes precedence over = =E2=80=9Cand=E2=80=9D, and which takes precedence over =E2=80=9Cor=E2=80=9D= ------- I have placed grouping operators ahead of logical operators and made = attribute operators top priority. In SCIM you cannot use =E2=80=9Cnot=E2=80= =9D in the middle of an attribute expression. This processing makes = expression like the following work: filter=3DuserType ne "Employee" and not (emails co "example.com" or emails.value co "example.org") Phil @independentid www.independentid.com = phil.hunt@oracle.com = > On Apr 15, 2016, at 1:20 PM, RFC Errata System = wrote: >=20 > The following errata report has been submitted for RFC7644, > "System for Cross-domain Identity Management: Protocol". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=3D7644&eid=3D4670 >=20 > -------------------------------------- > Type: Technical > Reported by: Vassilis Michalitsis >=20 > Section: 3.4.2.2 >=20 > Original Text > ------------- > Filters MUST be evaluated using the following order of operations, in > order of precedence: >=20 > 1. Grouping operators >=20 > 2. Logical operators - where "not" takes precedence over "and", > which takes precedence over "or" >=20 > 3. Attribute operators >=20 > Corrected Text > -------------- > Filters MUST be evaluated using the following order of operations, in > order of precedence: >=20 > 1. Grouping operators >=20 > 2. Attribute operators >=20 > 3. Logical operators - where "not" takes precedence over "and", > which takes precedence over "or" >=20 > Notes > ----- > It seems that the precedence of logical and attribute precedence is = reversed? The filter filter=3Dtitle sw "M" and userType eq "Employee" is = meant to be interpreted as filter=3D(title sw "M") and (userType eq = "Employee").=20 > This is also the "expected" behaviour consistent with most other = languages - with the notable exception of unary "or" which in SCIM is = disambiguated as it can only apply to a parenthesized filter expression. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party (IESG) > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC7644 (draft-ietf-scim-api-19) > -------------------------------------- > Title : System for Cross-domain Identity Management: = Protocol > Publication Date : September 2015 > Author(s) : P. Hunt, Ed., K. Grizzle, M. Ansari, E. = Wahlstroem, C. Mortimore > Category : PROPOSED STANDARD > Source : System for Cross-domain Identity Management > Area : Applications and Real-Time > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_563943A1-5EEA-4285-B0C9-D603530A90D3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 After some review, I believe this errata report is valid, = however the corrective text does not fully address the issue.  

The original text mixed = the notion of order or processing vs. order of precedence. I have = simplified the introductory sentence and changed the order of items to = reflect the text. I believe this correction reflects the way people have = implemented the specification.

It should say:
-------
Filters MUST be evaluated using the following = order of precedence:
1. Attribute operators (i.e. eq ne co sw ew = pr gt ge lt le)
2. Grouping operators
3. Logical operators - where =E2=80=9Cnot=E2=80=9D takes = precedence over =E2=80=9Cand=E2=80=9D, and which takes precedence over = =E2=80=9Cor=E2=80=9D
-------
I have placed grouping operators ahead of logical operators = and made attribute operators top priority. In SCIM you cannot use = =E2=80=9Cnot=E2=80=9D in the middle of an attribute expression. =  This processing makes expression like the following = work:

filter=3DuserType ne "Employee" and not (emails co "example.com" or
  emails.value co "example.org")



On Apr 15, 2016, at 1:20 PM, = RFC Errata System <rfc-editor@rfc-editor.org> wrote:

The = following errata report has been submitted for RFC7644,
"System for Cross-domain Identity Management: Protocol".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=3D7644&eid=3D= 4670

--------------------------------------
Type: = Technical
Reported by: Vassilis Michalitsis = <zmeeagain@gmail.com>

Section: = 3.4.2.2

Original Text
-------------
Filters MUST be evaluated using = the following order of operations, in
  order = of precedence:

  1. =  Grouping operators

  2. =  Logical operators - where "not" takes precedence over "and",
      which takes precedence = over "or"

  3.  Attribute = operators

Corrected Text
--------------
Filters MUST be evaluated using = the following order of operations, in
  order = of precedence:

  1. =  Grouping operators

  2. =  Attribute operators

  3. =  Logical operators - where "not" takes precedence over "and",
      which takes precedence = over "or"

Notes
-----
It seems that the precedence of logical and attribute = precedence is reversed? The filter filter=3Dtitle sw "M" and userType eq = "Employee" is meant to be interpreted as filter=3D(title sw "M") and = (userType eq "Employee").
This is also the "expected" = behaviour consistent with most other languages - with the notable = exception of unary "or" which in SCIM is disambiguated as it can only = apply to a parenthesized filter expression.

Instructions:
-------------
This = erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified = or
rejected. When a decision is reached, the verifying = party (IESG)
can log in to change the status and edit the = report, if necessary.

--------------------------------------
RFC7644 = (draft-ietf-scim-api-19)
--------------------------------------
Title =             &n= bsp; : System for Cross-domain Identity Management: Protocol
Publication Date    : September 2015
Author(s) =           : P. Hunt, = Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C. Mortimore
Category =            : = PROPOSED STANDARD
Source =             &n= bsp;: System for Cross-domain Identity Management
Area =             &n= bsp;  : Applications and Real-Time
Stream =             &n= bsp;: IETF
Verifying Party     : = IESG

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

= --Apple-Mail=_563943A1-5EEA-4285-B0C9-D603530A90D3-- From nobody Tue May 10 12:46:11 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5DF812D594 for ; Tue, 10 May 2016 10:55:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.296 X-Spam-Level: X-Spam-Status: No, score=-5.296 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sunet.se Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j8KnAhAPDTbr for ; Tue, 10 May 2016 10:55:42 -0700 (PDT) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [IPv6:2001:6b0:8:2::201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 048DF12D586 for ; Tue, 10 May 2016 10:55:40 -0700 (PDT) Received: from smtp1.sunet.se (smtp1.sunet.se [192.36.171.214]) by e-mailfilter01.sunet.se (8.14.4/8.14.4/Debian-4) with ESMTP id u4AHtRpt003498 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 10 May 2016 19:55:28 +0200 Received: from kerio.sunet.se (kerio.sunet.se [192.36.171.210]) by smtp1.sunet.se (8.14.9/8.14.7) with ESMTP id u4AHtJpC024176 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 May 2016 19:55:22 +0200 (CEST) VBR-Info: md=sunet.se; mc=all; mv=swamid.se DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sunet.se; s=default; t=1462902927; bh=xKWUB9GcmpjuT2iXeVs44chqP7qbkJv82/87ApnT2jE=; h=From:Subject:Date:References:To:In-Reply-To:Cc; b=RInjEA8lg4x5Lp2BYVFE2utvjro/1uKY8YrYmpe1OOnuf58fESgY2W8AR2kvN94jB fUY2FizNOPrs95NrIzAyLHGKgXNZYFuly96Q5Xqno5Q0XuzMuVNKdY1CVB1q3ODrfw II8ZQXiamfNXJg/Z7PyXylOBo0wVib/AIR94koxw= X-Footer: c3VuZXQuc2U= Received: from [62.102.145.131] ([62.102.145.131]) (authenticated user leifj@sunet.se) by kerio.sunet.se (Kerio Connect 9.0.1) with ESMTPSA; Tue, 10 May 2016 19:55:17 +0200 From: "Leif Johansson" Content-Type: multipart/alternative; boundary=Apple-Mail-0D4EF6AB-9CAA-4B17-AE74-C4A800CDE818 Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (1.0) Message-Id: <0F41C202-07AE-40CF-AEBB-74FB9AFB3B34@sunet.se> Date: Tue, 10 May 2016 19:55:17 +0200 References: <20160415202027.AC0E918000B@rfc-editor.org> To: Phil Hunt In-Reply-To: X-CanIt-Geo: ip=192.36.171.210; country=SE; latitude=59.3294; longitude=18.0686; http://maps.google.com/maps?q=59.3294,18.0686&z=6 X-CanItPRO-Stream: outbound-sunet-se:outbound (inherits from outbound-sunet-se:default, sunet-se:default, base:default) X-Canit-Stats-ID: 09QQFTssj - 83494a11e9c2 - 20160510 X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw Received-SPF: neutral (e-mailfilter01.sunet.se: 192.36.171.210 is neither permitted nor denied by domain leifj@sunet.se) receiver=e-mailfilter01.sunet.se; client-ip=192.36.171.210; envelope-from=; helo=smtp1.sunet.se; identity=mailfrom X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.36.171.201 Archived-At: X-Mailman-Approved-At: Tue, 10 May 2016 12:46:06 -0700 Cc: "ben@nostrum.com" , "aamelnikov@fastmail.fm" , "morteza.ansari@cisco.com" , "alissa@cooperw.in" , "zmeeagain@gmail.com" , "scim@ietf.org" , Kelly Grizzle , "erik.wahlstrom@nexusgroup.com" , Morteza Ansari , Chuck Mortimore , RFC Errata System Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4670) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2016 17:55:47 -0000 --Apple-Mail-0D4EF6AB-9CAA-4B17-AE74-C4A800CDE818 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 T3RoZXJzPyBTaG91bGQgd2UgYXNrIHRoZSByZmMgZWRpdG9yIHRvIHN1Ym1pdCB0aGUgZXJyYXRh IHdpdGggcGhpbHMgdGV4dD8NCg0KU2tpY2thdCBmcsOlbiBtaW4gaVBob25lDQoNCj4gMTAgbWFq IDIwMTYga2wuIDE5OjUxIHNrcmV2IFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5jb20+Og0K PiANCj4gQWZ0ZXIgc29tZSByZXZpZXcsIEkgYmVsaWV2ZSB0aGlzIGVycmF0YSByZXBvcnQgaXMg dmFsaWQsIGhvd2V2ZXIgdGhlIGNvcnJlY3RpdmUgdGV4dCBkb2VzIG5vdCBmdWxseSBhZGRyZXNz IHRoZSBpc3N1ZS4gIA0KPiANCj4gVGhlIG9yaWdpbmFsIHRleHQgbWl4ZWQgdGhlIG5vdGlvbiBv ZiBvcmRlciBvciBwcm9jZXNzaW5nIHZzLiBvcmRlciBvZiBwcmVjZWRlbmNlLiBJIGhhdmUgc2lt cGxpZmllZCB0aGUgaW50cm9kdWN0b3J5IHNlbnRlbmNlIGFuZCBjaGFuZ2VkIHRoZSBvcmRlciBv ZiBpdGVtcyB0byByZWZsZWN0IHRoZSB0ZXh0LiBJIGJlbGlldmUgdGhpcyBjb3JyZWN0aW9uIHJl ZmxlY3RzIHRoZSB3YXkgcGVvcGxlIGhhdmUgaW1wbGVtZW50ZWQgdGhlIHNwZWNpZmljYXRpb24u DQo+IA0KPiBJdCBzaG91bGQgc2F5Og0KPiAtLS0tLS0tDQo+IEZpbHRlcnMgTVVTVCBiZSBldmFs dWF0ZWQgdXNpbmcgdGhlIGZvbGxvd2luZyBvcmRlciBvZiBwcmVjZWRlbmNlOg0KPiAxLiBBdHRy aWJ1dGUgb3BlcmF0b3JzIChpLmUuIGVxIG5lIGNvIHN3IGV3IHByIGd0IGdlIGx0IGxlKQ0KPiAy LiBHcm91cGluZyBvcGVyYXRvcnMNCj4gMy4gTG9naWNhbCBvcGVyYXRvcnMgLSB3aGVyZSDigJxu b3TigJ0gdGFrZXMgcHJlY2VkZW5jZSBvdmVyIOKAnGFuZOKAnSwgYW5kIHdoaWNoIHRha2VzIHBy ZWNlZGVuY2Ugb3ZlciDigJxvcuKAnQ0KPiAtLS0tLS0tDQo+IEkgaGF2ZSBwbGFjZWQgZ3JvdXBp bmcgb3BlcmF0b3JzIGFoZWFkIG9mIGxvZ2ljYWwgb3BlcmF0b3JzIGFuZCBtYWRlIGF0dHJpYnV0 ZSBvcGVyYXRvcnMgdG9wIHByaW9yaXR5LiBJbiBTQ0lNIHlvdSBjYW5ub3QgdXNlIOKAnG5vdOKA nSBpbiB0aGUgbWlkZGxlIG9mIGFuIGF0dHJpYnV0ZSBleHByZXNzaW9uLiAgVGhpcyBwcm9jZXNz aW5nIG1ha2VzIGV4cHJlc3Npb24gbGlrZSB0aGUgZm9sbG93aW5nIHdvcms6DQo+IA0KPiBmaWx0 ZXI9dXNlclR5cGUgbmUgIkVtcGxveWVlIiBhbmQgbm90IChlbWFpbHMgY28gImV4YW1wbGUuY29t IiBvcg0KPiAgIGVtYWlscy52YWx1ZSBjbyAiZXhhbXBsZS5vcmciKQ0KPiANCj4gDQo+IFBoaWwN Cj4gDQo+IEBpbmRlcGVuZGVudGlkDQo+IHd3dy5pbmRlcGVuZGVudGlkLmNvbQ0KPiBwaGlsLmh1 bnRAb3JhY2xlLmNvbQ0KPiANCj4gDQo+PiBPbiBBcHIgMTUsIDIwMTYsIGF0IDE6MjAgUE0sIFJG QyBFcnJhdGEgU3lzdGVtIDxyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPiB3cm90ZToNCj4+IA0K Pj4gVGhlIGZvbGxvd2luZyBlcnJhdGEgcmVwb3J0IGhhcyBiZWVuIHN1Ym1pdHRlZCBmb3IgUkZD NzY0NCwNCj4+ICJTeXN0ZW0gZm9yIENyb3NzLWRvbWFpbiBJZGVudGl0eSBNYW5hZ2VtZW50OiBQ cm90b2NvbCIuDQo+PiANCj4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQo+PiBZb3UgbWF5IHJldmlldyB0aGUgcmVwb3J0IGJlbG93IGFuZCBhdDoNCj4+IGh0dHA6Ly93 d3cucmZjLWVkaXRvci5vcmcvZXJyYXRhX3NlYXJjaC5waHA/cmZjPTc2NDQmZWlkPTQ2NzANCj4+ IA0KPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4+IFR5cGU6IFRl Y2huaWNhbA0KPj4gUmVwb3J0ZWQgYnk6IFZhc3NpbGlzIE1pY2hhbGl0c2lzIDx6bWVlYWdhaW5A Z21haWwuY29tPg0KPj4gDQo+PiBTZWN0aW9uOiAzLjQuMi4yDQo+PiANCj4+IE9yaWdpbmFsIFRl eHQNCj4+IC0tLS0tLS0tLS0tLS0NCj4+IEZpbHRlcnMgTVVTVCBiZSBldmFsdWF0ZWQgdXNpbmcg dGhlIGZvbGxvd2luZyBvcmRlciBvZiBvcGVyYXRpb25zLCBpbg0KPj4gICBvcmRlciBvZiBwcmVj ZWRlbmNlOg0KPj4gDQo+PiAgIDEuICBHcm91cGluZyBvcGVyYXRvcnMNCj4+IA0KPj4gICAyLiAg TG9naWNhbCBvcGVyYXRvcnMgLSB3aGVyZSAibm90IiB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgImFu ZCIsDQo+PiAgICAgICB3aGljaCB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgIm9yIg0KPj4gDQo+PiAg IDMuICBBdHRyaWJ1dGUgb3BlcmF0b3JzDQo+PiANCj4+IENvcnJlY3RlZCBUZXh0DQo+PiAtLS0t LS0tLS0tLS0tLQ0KPj4gRmlsdGVycyBNVVNUIGJlIGV2YWx1YXRlZCB1c2luZyB0aGUgZm9sbG93 aW5nIG9yZGVyIG9mIG9wZXJhdGlvbnMsIGluDQo+PiAgIG9yZGVyIG9mIHByZWNlZGVuY2U6DQo+ PiANCj4+ICAgMS4gIEdyb3VwaW5nIG9wZXJhdG9ycw0KPj4gDQo+PiAgIDIuICBBdHRyaWJ1dGUg b3BlcmF0b3JzDQo+PiANCj4+ICAgMy4gIExvZ2ljYWwgb3BlcmF0b3JzIC0gd2hlcmUgIm5vdCIg dGFrZXMgcHJlY2VkZW5jZSBvdmVyICJhbmQiLA0KPj4gICAgICAgd2hpY2ggdGFrZXMgcHJlY2Vk ZW5jZSBvdmVyICJvciINCj4+IA0KPj4gTm90ZXMNCj4+IC0tLS0tDQo+PiBJdCBzZWVtcyB0aGF0 IHRoZSBwcmVjZWRlbmNlIG9mIGxvZ2ljYWwgYW5kIGF0dHJpYnV0ZSBwcmVjZWRlbmNlIGlzIHJl dmVyc2VkPyBUaGUgZmlsdGVyIGZpbHRlcj10aXRsZSBzdyAiTSIgYW5kIHVzZXJUeXBlIGVxICJF bXBsb3llZSIgaXMgbWVhbnQgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZmlsdGVyPSh0aXRsZSBzdyAi TSIpIGFuZCAodXNlclR5cGUgZXEgIkVtcGxveWVlIikuIA0KPj4gVGhpcyBpcyBhbHNvIHRoZSAi ZXhwZWN0ZWQiIGJlaGF2aW91ciBjb25zaXN0ZW50IHdpdGggbW9zdCBvdGhlciBsYW5ndWFnZXMg LSB3aXRoIHRoZSBub3RhYmxlIGV4Y2VwdGlvbiBvZiB1bmFyeSAib3IiIHdoaWNoIGluIFNDSU0g aXMgZGlzYW1iaWd1YXRlZCBhcyBpdCBjYW4gb25seSBhcHBseSB0byBhIHBhcmVudGhlc2l6ZWQg ZmlsdGVyIGV4cHJlc3Npb24uDQo+PiANCj4+IEluc3RydWN0aW9uczoNCj4+IC0tLS0tLS0tLS0t LS0NCj4+IFRoaXMgZXJyYXR1bSBpcyBjdXJyZW50bHkgcG9zdGVkIGFzICJSZXBvcnRlZCIuIElm IG5lY2Vzc2FyeSwgcGxlYXNlDQo+PiB1c2UgIlJlcGx5IEFsbCIgdG8gZGlzY3VzcyB3aGV0aGVy IGl0IHNob3VsZCBiZSB2ZXJpZmllZCBvcg0KPj4gcmVqZWN0ZWQuIFdoZW4gYSBkZWNpc2lvbiBp cyByZWFjaGVkLCB0aGUgdmVyaWZ5aW5nIHBhcnR5IChJRVNHKQ0KPj4gY2FuIGxvZyBpbiB0byBj aGFuZ2UgdGhlIHN0YXR1cyBhbmQgZWRpdCB0aGUgcmVwb3J0LCBpZiBuZWNlc3NhcnkuIA0KPj4g DQo+PiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPj4gUkZDNzY0NCAo ZHJhZnQtaWV0Zi1zY2ltLWFwaS0xOSkNCj4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tDQo+PiBUaXRsZSAgICAgICAgICAgICAgIDogU3lzdGVtIGZvciBDcm9zcy1kb21h aW4gSWRlbnRpdHkgTWFuYWdlbWVudDogUHJvdG9jb2wNCj4+IFB1YmxpY2F0aW9uIERhdGUgICAg OiBTZXB0ZW1iZXIgMjAxNQ0KPj4gQXV0aG9yKHMpICAgICAgICAgICA6IFAuIEh1bnQsIEVkLiwg Sy4gR3JpenpsZSwgTS4gQW5zYXJpLCBFLiBXYWhsc3Ryb2VtLCBDLiBNb3J0aW1vcmUNCj4+IENh dGVnb3J5ICAgICAgICAgICAgOiBQUk9QT1NFRCBTVEFOREFSRA0KPj4gU291cmNlICAgICAgICAg ICAgICA6IFN5c3RlbSBmb3IgQ3Jvc3MtZG9tYWluIElkZW50aXR5IE1hbmFnZW1lbnQNCj4+IEFy ZWEgICAgICAgICAgICAgICAgOiBBcHBsaWNhdGlvbnMgYW5kIFJlYWwtVGltZQ0KPj4gU3RyZWFt ICAgICAgICAgICAgICA6IElFVEYNCj4+IFZlcmlmeWluZyBQYXJ0eSAgICAgOiBJRVNHDQo+PiAN Cj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBz Y2ltIG1haWxpbmcgbGlzdA0KPj4gc2NpbUBpZXRmLm9yZw0KPj4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9zY2ltDQo+IA0K --Apple-Mail-0D4EF6AB-9CAA-4B17-AE74-C4A800CDE818 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iY29udGVudC10eXBlIiBjb250ZW50PSJ0ZXh0 L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPjwvaGVhZD48Ym9keSBkaXI9ImF1dG8iPjxkaXY+T3RoZXJz PyBTaG91bGQgd2UgYXNrIHRoZSByZmMgZWRpdG9yIHRvIHN1Ym1pdCB0aGUgZXJyYXRhIHdpdGgg cGhpbHMgdGV4dD88YnI+PGJyPlNraWNrYXQgZnLDpW4gbWluIGlQaG9uZTwvZGl2PjxkaXY+PGJy PjEwIG1haiAyMDE2IGtsLiAxOTo1MSBza3JldiBQaGlsIEh1bnQgJmx0OzxhIGhyZWY9Im1haWx0 bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSI+cGhpbC5odW50QG9yYWNsZS5jb208L2E+Jmd0Ozo8YnI+ PGJyPjwvZGl2PjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPjxkaXY+PG1ldGEgaHR0cC1lcXVpdj0i Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWwgY2hhcnNldD11dGYtOCI+QWZ0ZXIgc29t ZSByZXZpZXcsIEkgYmVsaWV2ZSB0aGlzIGVycmF0YSByZXBvcnQgaXMgdmFsaWQsIGhvd2V2ZXIg dGhlIGNvcnJlY3RpdmUgdGV4dCBkb2VzIG5vdCBmdWxseSBhZGRyZXNzIHRoZSBpc3N1ZS4gJm5i c3A7PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+PC9kaXY+PGRpdiBjbGFzcz0iIj5UaGUgb3Jp Z2luYWwgdGV4dCBtaXhlZCB0aGUgbm90aW9uIG9mIG9yZGVyIG9yIHByb2Nlc3NpbmcgdnMuIG9y ZGVyIG9mIHByZWNlZGVuY2UuIEkgaGF2ZSBzaW1wbGlmaWVkIHRoZSBpbnRyb2R1Y3Rvcnkgc2Vu dGVuY2UgYW5kIGNoYW5nZWQgdGhlIG9yZGVyIG9mIGl0ZW1zIHRvIHJlZmxlY3QgdGhlIHRleHQu IEkgYmVsaWV2ZSB0aGlzIGNvcnJlY3Rpb24gcmVmbGVjdHMgdGhlIHdheSBwZW9wbGUgaGF2ZSBp bXBsZW1lbnRlZCB0aGUgc3BlY2lmaWNhdGlvbi48L2Rpdj48ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj48L2Rpdj48ZGl2IGNsYXNzPSIiPkl0IHNob3VsZCBzYXk6PC9kaXY+PGRpdiBjbGFzcz0i Ij4tLS0tLS0tPC9kaXY+PGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc2l6 ZT0iMiIgY2xhc3M9IiI+RmlsdGVycyBNVVNUIGJlIGV2YWx1YXRlZCB1c2luZyB0aGUgZm9sbG93 aW5nIG9yZGVyIG9mIHByZWNlZGVuY2U6PC9mb250PjwvZGl2PjxkaXYgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIHNpemU9IjIiIGNsYXNzPSIiPjEuIEF0dHJpYnV0ZSBvcGVyYXRv cnMgKGkuZS4gZXEgbmUgY28gc3cgZXcgcHIgZ3QgZ2UgbHQgbGUpPC9mb250PjwvZGl2PjxkaXYg Y2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHNpemU9IjIiIGNsYXNzPSIiPjIuIEdy b3VwaW5nIG9wZXJhdG9yczwvZm9udD48L2Rpdj48ZGl2IGNsYXNzPSIiPjxkaXYgY2xhc3M9IiI+ PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHNpemU9IjIiIGNsYXNzPSIiPjMuIExvZ2ljYWwgb3Bl cmF0b3JzIC0gd2hlcmUg4oCcbm904oCdIHRha2VzIHByZWNlZGVuY2Ugb3ZlciDigJxhbmTigJ0s IGFuZCB3aGljaCB0YWtlcyBwcmVjZWRlbmNlIG92ZXIg4oCcb3LigJ08L2ZvbnQ+PC9kaXY+PC9k aXY+PGRpdiBjbGFzcz0iIj4tLS0tLS0tPC9kaXY+PGRpdiBjbGFzcz0iIj5JIGhhdmUgcGxhY2Vk IGdyb3VwaW5nIG9wZXJhdG9ycyBhaGVhZCBvZiBsb2dpY2FsIG9wZXJhdG9ycyBhbmQgbWFkZSBh dHRyaWJ1dGUgb3BlcmF0b3JzIHRvcCBwcmlvcml0eS4gSW4gU0NJTSB5b3UgY2Fubm90IHVzZSDi gJxub3TigJ0gaW4gdGhlIG1pZGRsZSBvZiBhbiBhdHRyaWJ1dGUgZXhwcmVzc2lvbi4gJm5ic3A7 VGhpcyBwcm9jZXNzaW5nIG1ha2VzIGV4cHJlc3Npb24gbGlrZSB0aGUgZm9sbG93aW5nIHdvcms6 PC9kaXY+PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+PC9kaXY+PGRpdiBjbGFzcz0iIj48cHJl IGNsYXNzPSJuZXdwYWdlIiBzdHlsZT0iZm9udC1zaXplOiAxM3B4OyBtYXJnaW4tdG9wOiAwcHg7 IG1hcmdpbi1ib3R0b206IDBweDsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPjxmb250IGZh Y2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj5maWx0ZXI9dXNlclR5cGUgbmUgIkVtcGxveWVlIiBh bmQgbm90IChlbWFpbHMgY28gIjxhIGhyZWY9Imh0dHA6Ly9leGFtcGxlLmNvbSIgY2xhc3M9IiI+ ZXhhbXBsZS5jb208L2E+IiBvcg0KICBlbWFpbHMudmFsdWUgY28gIjxhIGhyZWY9Imh0dHA6Ly9l eGFtcGxlLm9yZyIgY2xhc3M9IiI+ZXhhbXBsZS5vcmc8L2E+Iik8L2ZvbnQ+PC9wcmU+PGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+PC9kaXY+PGRpdiBjbGFzcz0iIj48ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iY29sb3I6 IHJnYigwLCAwLCAwKTsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtp dC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNl OyIgY2xhc3M9IiI+PGRpdiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6 IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0 LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+PGRpdiBjbGFzcz0iIj48 c3BhbiBjbGFzcz0iQXBwbGUtc3R5bGUtc3BhbiIgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTogc2Vw YXJhdGU7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGJvcmRlci1zcGFjaW5nOiAwcHg7Ij48ZGl2IGNs YXNzPSIiIHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBz cGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiPjxkaXYgY2xhc3M9 IiI+PGRpdiBjbGFzcz0iIj48ZGl2IGNsYXNzPSIiPlBoaWw8L2Rpdj48ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj48L2Rpdj48ZGl2IGNsYXNzPSIiPkBpbmRlcGVuZGVudGlkPC9kaXY+PGRpdiBj bGFzcz0iIj48YSBocmVmPSJodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tIiBjbGFzcz0iIj53 d3cuaW5kZXBlbmRlbnRpZC5jb208L2E+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PC9zcGFuPjxh IGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgY2xhc3M9IiIgc3R5bGU9Im9ycGhh bnM6IDI7IHdpZG93czogMjsiPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPjwvZGl2PjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjxiciBjbGFzcz0iIj48 ZGl2PjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPjxkaXYgY2xhc3M9IiI+T24gQXBy IDE1LCAyMDE2LCBhdCAxOjIwIFBNLCBSRkMgRXJyYXRhIFN5c3RlbSAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJmYy1lZGl0b3JAcmZjLWVkaXRvci5vcmciIGNsYXNzPSIiPnJmYy1lZGl0b3JAcmZjLWVk aXRvci5vcmc8L2E+Jmd0OyB3cm90ZTo8L2Rpdj48YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdl LW5ld2xpbmUiPjxkaXYgY2xhc3M9IiI+PGRpdiBjbGFzcz0iIj5UaGUgZm9sbG93aW5nIGVycmF0 YSByZXBvcnQgaGFzIGJlZW4gc3VibWl0dGVkIGZvciBSRkM3NjQ0LDxiciBjbGFzcz0iIj4iU3lz dGVtIGZvciBDcm9zcy1kb21haW4gSWRlbnRpdHkgTWFuYWdlbWVudDogUHJvdG9jb2wiLjxiciBj bGFzcz0iIj48YnIgY2xhc3M9IiI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS08YnIgY2xhc3M9IiI+WW91IG1heSByZXZpZXcgdGhlIHJlcG9ydCBiZWxvdyBhbmQgYXQ6PGJy IGNsYXNzPSIiPjxhIGhyZWY9Imh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvZXJyYXRhX3NlYXJj aC5waHA/cmZjPTc2NDQmYW1wO2VpZD00NjcwIiBjbGFzcz0iIj5odHRwOi8vd3d3LnJmYy1lZGl0 b3Iub3JnL2VycmF0YV9zZWFyY2gucGhwP3JmYz03NjQ0JmFtcDtlaWQ9NDY3MDwvYT48YnIgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t PGJyIGNsYXNzPSIiPlR5cGU6IFRlY2huaWNhbDxiciBjbGFzcz0iIj5SZXBvcnRlZCBieTogVmFz c2lsaXMgTWljaGFsaXRzaXMgJmx0OzxhIGhyZWY9Im1haWx0bzp6bWVlYWdhaW5AZ21haWwuY29t Ij56bWVlYWdhaW5AZ21haWwuY29tPC9hPiZndDs8YnIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPlNl Y3Rpb246IDMuNC4yLjI8YnIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPk9yaWdpbmFsIFRleHQ8YnIg Y2xhc3M9IiI+LS0tLS0tLS0tLS0tLTxiciBjbGFzcz0iIj5GaWx0ZXJzIE1VU1QgYmUgZXZhbHVh dGVkIHVzaW5nIHRoZSBmb2xsb3dpbmcgb3JkZXIgb2Ygb3BlcmF0aW9ucywgaW48YnIgY2xhc3M9 IiI+ICZuYnNwOyZuYnNwO29yZGVyIG9mIHByZWNlZGVuY2U6PGJyIGNsYXNzPSIiPjxiciBjbGFz cz0iIj4gJm5ic3A7Jm5ic3A7MS4gJm5ic3A7R3JvdXBpbmcgb3BlcmF0b3JzPGJyIGNsYXNzPSIi PjxiciBjbGFzcz0iIj4gJm5ic3A7Jm5ic3A7Mi4gJm5ic3A7TG9naWNhbCBvcGVyYXRvcnMgLSB3 aGVyZSAibm90IiB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgImFuZCIsPGJyIGNsYXNzPSIiPiAmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt3aGljaCB0YWtlcyBwcmVjZWRlbmNlIG92 ZXIgIm9yIjxiciBjbGFzcz0iIj48YnIgY2xhc3M9IiI+ICZuYnNwOyZuYnNwOzMuICZuYnNwO0F0 dHJpYnV0ZSBvcGVyYXRvcnM8YnIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPkNvcnJlY3RlZCBUZXh0 PGJyIGNsYXNzPSIiPi0tLS0tLS0tLS0tLS0tPGJyIGNsYXNzPSIiPkZpbHRlcnMgTVVTVCBiZSBl dmFsdWF0ZWQgdXNpbmcgdGhlIGZvbGxvd2luZyBvcmRlciBvZiBvcGVyYXRpb25zLCBpbjxiciBj bGFzcz0iIj4gJm5ic3A7Jm5ic3A7b3JkZXIgb2YgcHJlY2VkZW5jZTo8YnIgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPiAmbmJzcDsmbmJzcDsxLiAmbmJzcDtHcm91cGluZyBvcGVyYXRvcnM8YnIgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPiAmbmJzcDsmbmJzcDsyLiAmbmJzcDtBdHRyaWJ1dGUgb3BlcmF0 b3JzPGJyIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4gJm5ic3A7Jm5ic3A7My4gJm5ic3A7TG9naWNh bCBvcGVyYXRvcnMgLSB3aGVyZSAibm90IiB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgImFuZCIsPGJy IGNsYXNzPSIiPiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt3aGljaCB0YWtl cyBwcmVjZWRlbmNlIG92ZXIgIm9yIjxiciBjbGFzcz0iIj48YnIgY2xhc3M9IiI+Tm90ZXM8YnIg Y2xhc3M9IiI+LS0tLS08YnIgY2xhc3M9IiI+SXQgc2VlbXMgdGhhdCB0aGUgcHJlY2VkZW5jZSBv ZiBsb2dpY2FsIGFuZCBhdHRyaWJ1dGUgcHJlY2VkZW5jZSBpcyByZXZlcnNlZD8gVGhlIGZpbHRl ciBmaWx0ZXI9dGl0bGUgc3cgIk0iIGFuZCB1c2VyVHlwZSBlcSAiRW1wbG95ZWUiIGlzIG1lYW50 IHRvIGJlIGludGVycHJldGVkIGFzIGZpbHRlcj0odGl0bGUgc3cgIk0iKSBhbmQgKHVzZXJUeXBl IGVxICJFbXBsb3llZSIpLiA8YnIgY2xhc3M9IiI+VGhpcyBpcyBhbHNvIHRoZSAiZXhwZWN0ZWQi IGJlaGF2aW91ciBjb25zaXN0ZW50IHdpdGggbW9zdCBvdGhlciBsYW5ndWFnZXMgLSB3aXRoIHRo ZSBub3RhYmxlIGV4Y2VwdGlvbiBvZiB1bmFyeSAib3IiIHdoaWNoIGluIFNDSU0gaXMgZGlzYW1i aWd1YXRlZCBhcyBpdCBjYW4gb25seSBhcHBseSB0byBhIHBhcmVudGhlc2l6ZWQgZmlsdGVyIGV4 cHJlc3Npb24uPGJyIGNsYXNzPSIiPjxiciBjbGFzcz0iIj5JbnN0cnVjdGlvbnM6PGJyIGNsYXNz PSIiPi0tLS0tLS0tLS0tLS08YnIgY2xhc3M9IiI+VGhpcyBlcnJhdHVtIGlzIGN1cnJlbnRseSBw b3N0ZWQgYXMgIlJlcG9ydGVkIi4gSWYgbmVjZXNzYXJ5LCBwbGVhc2U8YnIgY2xhc3M9IiI+dXNl ICJSZXBseSBBbGwiIHRvIGRpc2N1c3Mgd2hldGhlciBpdCBzaG91bGQgYmUgdmVyaWZpZWQgb3I8 YnIgY2xhc3M9IiI+cmVqZWN0ZWQuIFdoZW4gYSBkZWNpc2lvbiBpcyByZWFjaGVkLCB0aGUgdmVy aWZ5aW5nIHBhcnR5IChJRVNHKTxiciBjbGFzcz0iIj5jYW4gbG9nIGluIHRvIGNoYW5nZSB0aGUg c3RhdHVzIGFuZCBlZGl0IHRoZSByZXBvcnQsIGlmIG5lY2Vzc2FyeS4gPGJyIGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxiciBjbGFz cz0iIj5SRkM3NjQ0IChkcmFmdC1pZXRmLXNjaW0tYXBpLTE5KTxiciBjbGFzcz0iIj4tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxiciBjbGFzcz0iIj5UaXRsZSAmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDs6IFN5c3RlbSBmb3IgQ3Jvc3MtZG9tYWluIElkZW50aXR5IE1h bmFnZW1lbnQ6IFByb3RvY29sPGJyIGNsYXNzPSIiPlB1YmxpY2F0aW9uIERhdGUgJm5ic3A7Jm5i c3A7Jm5ic3A7OiBTZXB0ZW1iZXIgMjAxNTxiciBjbGFzcz0iIj5BdXRob3IocykgJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBQLiBI dW50LCBFZC4sIEsuIEdyaXp6bGUsIE0uIEFuc2FyaSwgRS4gV2FobHN0cm9lbSwgQy4gTW9ydGlt b3JlPGJyIGNsYXNzPSIiPkNhdGVnb3J5ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogUFJPUE9TRUQgU1RBTkRBUkQ8YnIg Y2xhc3M9IiI+U291cmNlICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogU3lzdGVtIGZvciBDcm9zcy1k b21haW4gSWRlbnRpdHkgTWFuYWdlbWVudDxiciBjbGFzcz0iIj5BcmVhICZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOzogQXBwbGljYXRpb25zIGFuZCBSZWFsLVRpbWU8YnIgY2xhc3M9 IiI+U3RyZWFtICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogSUVURjxiciBjbGFzcz0iIj5WZXJpZnlp bmcgUGFydHkgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBJRVNHPGJyIGNsYXNzPSIiPjxiciBj bGFzcz0iIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxi ciBjbGFzcz0iIj5zY2ltIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj48YSBocmVmPSJtYWlsdG86 c2NpbUBpZXRmLm9yZyI+c2NpbUBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+PGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltIj5odHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW08L2E+PGJyIGNsYXNzPSIiPjwvZGl2PjwvZGl2Pjwv YmxvY2txdW90ZT48L2Rpdj48YnIgY2xhc3M9IiI+PC9kaXY+PC9kaXY+PC9ibG9ja3F1b3RlPjwv Ym9keT48L2h0bWw+ --Apple-Mail-0D4EF6AB-9CAA-4B17-AE74-C4A800CDE818-- From nobody Tue May 10 12:59:02 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6B3312D8A5 for ; Tue, 10 May 2016 12:58:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.796 X-Spam-Level: X-Spam-Status: No, score=-3.796 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pc1z78sGcSiy for ; Tue, 10 May 2016 12:58:57 -0700 (PDT) Received: from tr21g12.aset.psu.edu (tr21g12.aset.psu.edu [146.186.149.142]) by ietfa.amsl.com (Postfix) with ESMTP id 0330F12D88D for ; Tue, 10 May 2016 12:58:56 -0700 (PDT) Received: from ucs20.ait.psu.edu (ucs20.ait.psu.edu [128.118.73.22]) by tr21g12.aset.psu.edu (8.14.3/8.14.3) with ESMTP id u4AJwthk3145866 for ; Tue, 10 May 2016 15:58:56 -0400 Date: Tue, 10 May 2016 15:58:55 -0400 (EDT) From: Steve Moyer To: scim@ietf.org Message-ID: <2070765955.3863259.1462910335878.JavaMail.zimbra@psu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Originating-IP: [75.102.121.133] X-Mailer: Zimbra 8.6.0_GA_1194 (ZimbraWebClient - FF48 (Linux)/8.6.0_GA_1194) Thread-Topic: SCIM filters Thread-Index: ldlnaRF/V2ggDOFAnztmXq+1eg1Ptg== X-Virus-Scanned: by amavisd-new Archived-At: Subject: [scim] SCIM filters X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Steve Moyer List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2016 19:58:59 -0000 We've been working on an ANTLR grammar to lex and parse the SCIM filter and= have a question about the "intent" of the specification. This syntax is a= llowed: attr[a eq b and attr[c eq d]] but this syntax is not: attr[attr[c eq d]] Can someone explain why the first filter is valid but the second is not? O= ur current guess is that it's an unintended side effect of valFilter's recu= rsion back to FILTER (through logExp). We'll be sharing this grammar (and = the resulting library) with anyone interested as part of our OSS SCIM 2.0 i= mplementation. Thanks, Steve =E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80=A6. We=E2=80=99ve got= the wheel, fire, the TV clicker=E2=80=94what else do you need?=E2=80=9D - = Dean Kamen From nobody Tue May 10 13:13:49 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 105A412D8CF for ; Tue, 10 May 2016 13:13:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.216 X-Spam-Level: X-Spam-Status: No, score=-5.216 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nwmSZ4JRrNp5 for ; Tue, 10 May 2016 13:13:45 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 166D212D8CA for ; Tue, 10 May 2016 13:13:45 -0700 (PDT) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id u4AKDgsN024422 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 10 May 2016 20:13:43 GMT Received: from aserv0122.oracle.com (aserv0122.oracle.com [141.146.126.236]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id u4AKDgIm010649 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 10 May 2016 20:13:42 GMT Received: from abhmp0006.oracle.com (abhmp0006.oracle.com [141.146.116.12]) by aserv0122.oracle.com (8.13.8/8.13.8) with ESMTP id u4AKDdqm021442; Tue, 10 May 2016 20:13:41 GMT Received: from [10.0.1.21] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 10 May 2016 13:13:39 -0700 Content-Type: multipart/alternative; boundary="Apple-Mail=_B13E033F-F68A-4105-972A-8823B5740C39" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Phil Hunt In-Reply-To: <2070765955.3863259.1462910335878.JavaMail.zimbra@psu.edu> Date: Tue, 10 May 2016 13:13:37 -0700 Message-Id: <174D1FAA-A8B7-4DE8-A33E-48A7B4402A0E@oracle.com> References: <2070765955.3863259.1462910335878.JavaMail.zimbra@psu.edu> To: Steve Moyer X-Mailer: Apple Mail (2.3124) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Cc: scim@ietf.org Subject: Re: [scim] SCIM filters X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2016 20:13:48 -0000 --Apple-Mail=_B13E033F-F68A-4105-972A-8823B5740C39 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Steve Neither is allowed. =20 The only filter allowed inside of [ ] is a =E2=80=9CvalFilter=E2=80=9D = which is defined as an attribute expression or logical expression. valuePath =3D attrPath "[" valFilter "]" ; FILTER uses sub-attributes of a parent attrPath valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")" I don=E2=80=99t see your example listed anywhere. Can you clarify where = you got it? Phil @independentid www.independentid.com = phil.hunt@oracle.com = > On May 10, 2016, at 12:58 PM, Steve Moyer wrote: >=20 > We've been working on an ANTLR grammar to lex and parse the SCIM = filter and have a question about the "intent" of the specification. = This syntax is allowed: >=20 > attr[a eq b and attr[c eq d]] >=20 > but this syntax is not: >=20 > attr[attr[c eq d]] >=20 > Can someone explain why the first filter is valid but the second is = not? Our current guess is that it's an unintended side effect of = valFilter's recursion back to FILTER (through logExp). We'll be sharing = this grammar (and the resulting library) with anyone interested as part = of our OSS SCIM 2.0 implementation. >=20 > Thanks, >=20 > Steve >=20 > =E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80=A6. We=E2=80=99ve = got the wheel, fire, the TV clicker=E2=80=94what else do you need?=E2=80=9D= - Dean Kamen >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_B13E033F-F68A-4105-972A-8823B5740C39 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Steve

Neither is allowed.  

The only filter allowed inside of [ ] = is a =E2=80=9CvalFilter=E2=80=9D which is defined as an attribute = expression or logical expression.
 valuePath =3D attrPath =
"[" valFilter "]"
                 ; FILTER uses sub-attributes of a parent attrPath

     valFilter =3D attrExp / logExp / *1"not" "(" valFilter =
")"

I don=E2=80=99= t see your example listed anywhere.  Can you clarify where you got = it?




On May 10, 2016, at 12:58 PM, Steve Moyer <smoyer@psu.edu> = wrote:

We've been working on an ANTLR grammar to lex and parse the = SCIM filter and have a question about the "intent" of the specification. =  This syntax is allowed:

attr[a eq b = and attr[c eq d]]

but this syntax is = not:

attr[attr[c eq d]]

Can someone explain why the first filter is valid but the = second is not?  Our current guess is that it's an unintended side = effect of valFilter's recursion back to FILTER (through logExp). =  We'll be sharing this grammar (and the resulting library) with = anyone interested as part of our OSS SCIM 2.0 implementation.

Thanks,

Steve

=E2=80=9CAll the easy stuff=E2=80=99s been = done=E2=80=A6. We=E2=80=99ve got the wheel, fire, the TV clicker=E2=80=94w= hat else do you need?=E2=80=9D - Dean Kamen

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

= --Apple-Mail=_B13E033F-F68A-4105-972A-8823B5740C39-- From nobody Tue May 10 13:33:54 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19EF112D618 for ; Tue, 10 May 2016 13:33:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.195 X-Spam-Level: X-Spam-Status: No, score=-5.195 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7LNW8vAc9iGu for ; Tue, 10 May 2016 13:33:50 -0700 (PDT) Received: from tr21g10.aset.psu.edu (tr21g10.aset.psu.edu [146.186.149.132]) by ietfa.amsl.com (Postfix) with ESMTP id C3BCD12D5D7 for ; Tue, 10 May 2016 13:33:50 -0700 (PDT) Received: from ucs20.ait.psu.edu (ucs20.ait.psu.edu [128.118.73.22]) by tr21g10.aset.psu.edu (8.14.3/8.14.3) with ESMTP id u4AKXn0O3813558; Tue, 10 May 2016 16:33:49 -0400 Date: Tue, 10 May 2016 16:33:49 -0400 (EDT) From: Steve Moyer To: Phil Hunt Message-ID: <1840414236.3952744.1462912429256.JavaMail.zimbra@psu.edu> In-Reply-To: <174D1FAA-A8B7-4DE8-A33E-48A7B4402A0E@oracle.com> References: <2070765955.3863259.1462910335878.JavaMail.zimbra@psu.edu> <174D1FAA-A8B7-4DE8-A33E-48A7B4402A0E@oracle.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_3952743_9129869.1462912429255" X-Originating-IP: [75.102.121.133] X-Mailer: Zimbra 8.6.0_GA_1194 (ZimbraWebClient - FF48 (Linux)/8.6.0_GA_1194) Thread-Topic: SCIM filters Thread-Index: CN3y9svjB5DBmovvTaNwT/0itxNe5Q== X-Virus-Scanned: by amavisd-new Archived-At: Cc: scim@ietf.org Subject: Re: [scim] SCIM filters X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Steve Moyer List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2016 20:33:53 -0000 ------=_Part_3952743_9129869.1462912429255 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Phil,=20 Thanks for the quick answer! I agree with what you describe as the intent o= f the grammar in the specification, but the grammar *DOES* allow the first = case since it has an "AND" or "OR" in it. Since the logExp is defined as:= =20 logExp =3D FILTER SP ("and" / "or") SP FILTER=20 And since the FILTER definition is:=20 FILTER =3D attrExp / logExp / valuePath / *1"not" "(" FILTER ")"=20 So the grammar recurses when there's a logExp inside the valuePath, and you= can therefore have a valuePath inside a valuePath so long as it's part of = said logExp. The examples I gave are part of the test suite we wrote to mak= e sure our lexer/parser was functional. We expected both to fail, then real= ized that one actually can succeed.=20 Steve=20 =E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80=A6. We=E2=80=99ve got= the wheel, fire, the TV clicker=E2=80=94what else do you need?=E2=80=9D - = Dean Kamen=20 From: "Phil Hunt" =20 To: "Steve Moyer" =20 Cc: scim@ietf.org=20 Sent: Tuesday, May 10, 2016 4:13:37 PM=20 Subject: Re: [scim] SCIM filters=20 Steve=20 Neither is allowed.=20 The only filter allowed inside of [ ] is a =E2=80=9CvalFilter=E2=80=9D whic= h is defined as an attribute expression or logical expression.=20 valuePath =3D attrPath "[" valFilter "]" ; FILTER uses sub-attributes of a parent attrPath valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")"=20 I don=E2=80=99t see your example listed anywhere. Can you clarify where you= got it?=20 Phil=20 @independentid=20 www.independentid.com=20 phil.hunt@oracle.com=20 On May 10, 2016, at 12:58 PM, Steve Moyer < smoyer@psu.edu > wrote:=20 We've been working on an ANTLR grammar to lex and parse the SCIM filter and= have a question about the "intent" of the specification. This syntax is al= lowed:=20 attr[a eq b and attr[c eq d]]=20 but this syntax is not:=20 attr[attr[c eq d]]=20 Can someone explain why the first filter is valid but the second is not? Ou= r current guess is that it's an unintended side effect of valFilter's recur= sion back to FILTER (through logExp). We'll be sharing this grammar (and th= e resulting library) with anyone interested as part of our OSS SCIM 2.0 imp= lementation.=20 Thanks,=20 Steve=20 =E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80=A6. We=E2=80=99ve got= the wheel, fire, the TV clicker=E2=80=94what else do you need?=E2=80=9D - = Dean Kamen=20 _______________________________________________=20 scim mailing list=20 scim@ietf.org=20 https://www.ietf.org/mailman/listinfo/scim=20 ------=_Part_3952743_9129869.1462912429255 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Phil,

Thanks for the quick answer!  I agree with what you descr= ibe as the intent of the grammar in the specification, but the grammar *DOE= S* allow the first case since it has an "AND" or "OR" in it.  Since th= e logExp is defined as:

logExp =3D FILTER SP ("and" / "or"= ) SP FILTER

And since the FILTER definition is:

FILTER =3D attrExp / logExp / valuePath / *1"not" "(" FILTER ")"
=
So the grammar recurses when there's a logExp inside the valuePath, and= you can therefore have a valuePath inside a valuePath so long as it's part= of said logExp.  The examples I gave are part of the test suite we wr= ote to make sure our lexer/parser was functional.  We expected both to= fail, then realized that one actually can succeed.

Steve


=E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80= =A6. We=E2=80=99ve got the wheel, fire, the TV clicker=E2=80=94what else do= you need?=E2=80=9D - Dean Kamen

From: "Phil Hunt" <p= hil.hunt@oracle.com>
To: "Steve Moyer" <smoyer@psu.edu><= br>Cc: scim@ietf.org
Sent: Tuesday, May 10, 2016 4:13:37 P= M
Subject: Re: [scim] SCIM filters

Steve

Neither is allowed.  

=
The only filter allowed inside of [ ] is a =E2=80=9CvalFilt= er=E2=80=9D which is defined as an attribute expression or logical expressi= on.
 valuePath =
=3D attrPath "[" valFilter "]"
                 ; FILTER uses sub-attributes of a parent attrPath

     valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")"

I don=E2=80=99t see your exa= mple listed anywhere.  Can you clarify where you got it?

Phil

=
@independentid
www.independentid.com
phil.hunt@oracle.com


<= br class=3D"Apple-interchange-newline">

On May 10, 2016,= at 12:58 PM, Steve Moyer <smoyer@psu.edu> wrote:

We've been working on an = ANTLR grammar to lex and parse the SCIM filter and have a question about th= e "intent" of the specification.  This syntax is allowed:

attr[a eq b and attr[c eq d]]

but this syntax is not:

attr[attr[c eq d]]
Can someone explain why the first filter is vali= d but the second is not?  Our current guess is that it's an unintended= side effect of valFilter's recursion back to FILTER (through logExp). &nbs= p;We'll be sharing this grammar (and the resulting library) with anyone int= erested as part of our OSS SCIM 2.0 implementation.

Thanks,

Steve

=E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80=A6. We=E2=80=99ve = got the wheel, fire, the TV clicker=E2=80=94what else do you need?=E2=80=9D= - Dean Kamen

________________________________= _______________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim
=


------=_Part_3952743_9129869.1462912429255-- From nobody Tue May 10 19:34:47 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B64C912B02A for ; Tue, 10 May 2016 19:34:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.901 X-Spam-Level: X-Spam-Status: No, score=-2.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_03_06=1.592, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0uPBYgB9I6KE for ; Tue, 10 May 2016 19:34:44 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB06F12D116 for ; Tue, 10 May 2016 19:26:59 -0700 (PDT) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id u4B2QwZ4012179 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 11 May 2016 02:26:59 GMT Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id u4B2QwmU010361 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 11 May 2016 02:26:58 GMT Received: from abhmp0019.oracle.com (abhmp0019.oracle.com [141.146.116.25]) by userv0121.oracle.com (8.13.8/8.13.8) with ESMTP id u4B2QuXn000303; Wed, 11 May 2016 02:26:56 GMT Received: from [10.0.1.21] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 10 May 2016 19:26:56 -0700 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: text/html; charset=utf-8 X-Apple-Auto-Saved: 1 X-Apple-Mail-Remote-Attachments: YES From: Phil Hunt X-Apple-Base-Url: x-msg://15/ In-Reply-To: <1840414236.3952744.1462912429256.JavaMail.zimbra@psu.edu> X-Apple-Windows-Friendly: 1 Date: Tue, 10 May 2016 15:36:57 -0700 X-Apple-Mail-Signature: SKIP_SIGNATURE Content-Transfer-Encoding: quoted-printable Message-Id: References: <2070765955.3863259.1462910335878.JavaMail.zimbra@psu.edu> <174D1FAA-A8B7-4DE8-A33E-48A7B4402A0E@oracle.com> <1840414236.3952744.1462912429256.JavaMail.zimbra@psu.edu> X-Uniform-Type-Identifier: com.apple.mail-draft To: Steve Moyer X-Mailer: Apple Mail (2.3124) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Cc: scim@ietf.org Subject: Re: [scim] SCIM filters X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 02:34:46 -0000 Ok. I will likely have to submit an errata.




On May 10, 2016, at 1:33 PM, Steve Moyer <smoyer@psu.edu> = wrote:

Phil,

Thanks for the quick answer!  I = agree with what you describe as the intent of the grammar in the = specification, but the grammar *DOES* allow the first case since it has = an "AND" or "OR" in it.  Since the logExp is defined as:

logExp =3D FILTER SP ("and" / "or") SP FILTER

And since the FILTER definition is:

FILTER =3D attrExp / logExp / valuePath / *1"not" = "(" FILTER ")"

So the grammar recurses when = there's a logExp inside the valuePath, and you can therefore have a = valuePath inside a valuePath so long as it's part of said logExp.  = The examples I gave are part of the test suite we wrote to make sure our = lexer/parser was functional.  We expected both to fail, then = realized that one actually can succeed.

Steve


=E2=80=9CAll the easy stuff=E2=80=99= s been done=E2=80=A6. We=E2=80=99ve got the wheel, fire, the TV = clicker=E2=80=94what else do you need?=E2=80=9D - Dean Kamen

From: "Phil = Hunt" <phil.hunt@oracle.com>
To: = "Steve Moyer" <smoyer@psu.edu>
Cc: scim@ietf.org
Sent: Tuesday, May 10, 2016 4:13:37 PM
Subject: Re: [scim] SCIM filters

Steve

Neither is allowed.  

The only filter allowed inside of [ ] = is a =E2=80=9CvalFilter=E2=80=9D which is defined as an attribute = expression or logical expression.
 valuePath =3D attrPath =
"[" valFilter "]"
                 ; FILTER uses sub-attributes of a parent attrPath

     valFilter =3D attrExp / logExp / *1"not" "(" valFilter =
")"

I don=E2=80=99= t see your example listed anywhere.  Can you clarify where you got = it?





On = May 10, 2016, at 12:58 PM, Steve Moyer <smoyer@psu.edu> wrote:

We've = been working on an ANTLR grammar to lex and parse the SCIM filter and = have a question about the "intent" of the specification.  This = syntax is allowed:

attr[a eq b and attr[c = eq d]]

but this syntax is not:

attr[attr[c eq d]]

Can someone explain why the first filter is valid but the = second is not?  Our current guess is that it's an unintended side = effect of valFilter's recursion back to FILTER (through logExp). =  We'll be sharing this grammar (and the resulting library) with = anyone interested as part of our OSS SCIM 2.0 implementation.

Thanks,

Steve

=E2=80=9CAll the easy stuff=E2=80=99s been = done=E2=80=A6. We=E2=80=99ve got the wheel, fire, the TV clicker=E2=80=94w= hat else do you need?=E2=80=9D - Dean Kamen

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim



= From nobody Wed May 11 00:47:48 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D189B12D102 for ; Tue, 10 May 2016 15:48:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -107.898 X-Spam-Level: X-Spam-Status: No, score=-107.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.996, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D9-eblkw6CrZ for ; Tue, 10 May 2016 15:48:45 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC8D212B00A for ; Tue, 10 May 2016 15:48:44 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id BF421180004; Tue, 10 May 2016 15:47:50 -0700 (PDT) To: phil.hunt@yahoo.com, kelly.grizzle@sailpoint.com, morteza.ansari@cisco.com, erik.wahlstrom@nexusgroup.com, cmortimore@salesforce.com, ben@nostrum.com, alissa@cooperw.in, aamelnikov@fastmail.fm, moransar@cisco.com, leifj@sunet.se X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Message-Id: <20160510224750.BF421180004@rfc-editor.org> Date: Tue, 10 May 2016 15:47:50 -0700 (PDT) Archived-At: X-Mailman-Approved-At: Wed, 11 May 2016 00:47:47 -0700 Cc: scim@ietf.org, phil.hunt@yahoo.com, rfc-editor@rfc-editor.org Subject: [scim] [Technical Errata Reported] RFC7644 (4690) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2016 22:48:47 -0000 The following errata report has been submitted for RFC7644, "System for Cross-domain Identity Management: Protocol". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=7644&eid=4690 -------------------------------------- Type: Technical Reported by: Phil Hunt Section: 3.4.2.2 Original Text ------------- valFilter = attrExp / logExp / *1"not" "(" valFilter ")" Corrected Text -------------- valFilter = attrExp / valLogExp / *1"not" "(" valFilter ")" valLogExp = attrExp SP ("and" / "or") SP attrExp Notes ----- Figure 1 contains the ABNF for SCIM filters. The term "logExp" specifies "FILTER" as an option which unintentionally allows recursion. A valFilter should only allow simple sub-attribute expressions and simple logic. Nesting of valuePath (e.g. attr[a eq b and attr[c eq d]]) should not be possible. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary. -------------------------------------- RFC7644 (draft-ietf-scim-api-19) -------------------------------------- Title : System for Cross-domain Identity Management: Protocol Publication Date : September 2015 Author(s) : P. Hunt, Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C. Mortimore Category : PROPOSED STANDARD Source : System for Cross-domain Identity Management Area : Applications and Real-Time Stream : IETF Verifying Party : IESG From nobody Wed May 11 00:47:51 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AE5912D0E8 for ; Tue, 10 May 2016 18:51:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sailpoint.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sVnHaKxNsXW5 for ; Tue, 10 May 2016 18:51:21 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0117.outbound.protection.outlook.com [207.46.100.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B61F12B02E for ; Tue, 10 May 2016 18:51:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sailpoint.onmicrosoft.com; s=selector1-sailpoint-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/nHmo0z8vrg1qBKcq0Ds2a1jehsJnVrP6jYf3aHh6x4=; b=TIWws5uG14WFXTqzq2ZkTtnAqKmXjOyH9PF42Q366P8/3/SytypKA0CI6BAuIAmrl3psJ8o9Hq7JH7lNkbUfly06KmHtu8wcrpu/K0ubXG25M+j5TOy9TLDAS1PoHnErupi5gbF0EivMCJWblZP4/L7UDZuBT9IKGWa9uhRgt0s= Received: from CY1PR04MB2363.namprd04.prod.outlook.com (10.167.10.143) by CY1PR04MB2361.namprd04.prod.outlook.com (10.167.10.141) with Microsoft SMTP Server (TLS) id 15.1.492.11; Wed, 11 May 2016 01:51:19 +0000 Received: from CY1PR04MB2363.namprd04.prod.outlook.com ([10.167.10.143]) by CY1PR04MB2363.namprd04.prod.outlook.com ([10.167.10.143]) with mapi id 15.01.0492.016; Wed, 11 May 2016 01:51:19 +0000 From: Kelly Grizzle To: Leif Johansson , Phil Hunt Thread-Topic: [scim] [Technical Errata Reported] RFC7644 (4670) Thread-Index: AQHRl1RPIlehiTER+EOZ6qVD4f2aqZ+ymkwAgAABRICAADNhEA== Date: Wed, 11 May 2016 01:51:19 +0000 Message-ID: References: <20160415202027.AC0E918000B@rfc-editor.org> <0F41C202-07AE-40CF-AEBB-74FB9AFB3B34@sunet.se> In-Reply-To: <0F41C202-07AE-40CF-AEBB-74FB9AFB3B34@sunet.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: sunet.se; dkim=none (message not signed) header.d=none;sunet.se; dmarc=none action=none header.from=sailpoint.com; x-originating-ip: [70.114.154.180] x-ms-office365-filtering-correlation-id: 1148ca50-f935-41b6-680f-08d3793ebf7c x-microsoft-exchange-diagnostics: 1; CY1PR04MB2361; 5:j2JVHO78X3Z2TYpZfOFNWRpSeph+9XDRkKSOBXAd7OlTysJHV4S5PyTV6RKTVs4mY3pW/RuB1EMMjlbylQIWlEj/1h07C/u8lL64W3kvH7lhdmPlAOCL9bNpqpkzqrKfJBKISWAmwIg7zfRn8A96bw==; 24:2HyhRMi8XtQXPE6i7f12THZ7uKnVfR/biMV3dWHJtzWpOe6FpuU8mo/EmOTihV4NHYYF7HzZrCx8fSk43g934mQQL915Isvi+xlvM9DsHcM=; 7:pgWp+crLHTo9xTbuKfJRzP6IG7YZhyIugaOzId9TrfaZ0fkQ9Mc9siRrlAdPmxYxRm2WGSkoTbTth5iQSdhZEE8AkWzuUyOayIfsf+AcWeKVDhBtS2GFBcY4A+tpoHzoeAmFASff0tHsgp7a+IRpy3ZFE+dN6HXcCEfNblCG5Iq1i5ud22/c3F//qA160ihX x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR04MB2361; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046); SRVR:CY1PR04MB2361; BCL:0; PCL:0; RULEID:; SRVR:CY1PR04MB2361; x-forefront-prvs: 0939529DE2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(24454002)(106116001)(19609705001)(19580405001)(33656002)(19580395003)(122556002)(2906002)(5003600100002)(790700001)(586003)(81166006)(76576001)(5001770100001)(3846002)(3280700002)(1220700001)(19617315012)(6116002)(4326007)(16601075003)(87936001)(5008740100001)(1680700002)(102836003)(5002640100001)(3660700001)(189998001)(2900100001)(2950100001)(92566002)(11100500001)(15188155005)(5004730100002)(77096005)(66066001)(86362001)(74316001)(10400500002)(15975445007)(8936002)(16236675004)(99286002)(76176999)(54356999)(19625215002)(9686002)(50986999)(16799955002)(19300405004)(7059030); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR04MB2361; H:CY1PR04MB2363.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY1PR04MB236389514D2C4D2B6D7194E1E2720CY1PR04MB2363namp_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 11 May 2016 01:51:19.5031 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR04MB2361 Archived-At: X-Mailman-Approved-At: Wed, 11 May 2016 00:47:47 -0700 Cc: "ben@nostrum.com" , "aamelnikov@fastmail.fm" , "morteza.ansari@cisco.com" , "alissa@cooperw.in" , "zmeeagain@gmail.com" , "scim@ietf.org" , "erik.wahlstrom@nexusgroup.com" , Morteza Ansari , Chuck Mortimore , RFC Errata System Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4670) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 01:51:25 -0000 --_000_CY1PR04MB236389514D2C4D2B6D7194E1E2720CY1PR04MB2363namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SeKAmW0gaGFwcHkgd2l0aCBQaGls4oCZcyBzdWdnZXN0aW9uLg0KDQpGcm9tOiBMZWlmIEpvaGFu c3NvbiBbbWFpbHRvOmxlaWZqQHN1bmV0LnNlXQ0KU2VudDogVHVlc2RheSwgTWF5IDEwLCAyMDE2 IDEyOjU1IFBNDQpUbzogUGhpbCBIdW50IDxwaGlsLmh1bnRAb3JhY2xlLmNvbT4NCkNjOiBSRkMg RXJyYXRhIFN5c3RlbSA8cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZz47IEtlbGx5IEdyaXp6bGUg PGtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbT47IG1vcnRlemEuYW5zYXJpQGNpc2NvLmNvbTsg ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5jb207IENodWNrIE1vcnRpbW9yZSA8Y21vcnRpbW9y ZUBzYWxlc2ZvcmNlLmNvbT47IGJlbkBub3N0cnVtLmNvbTsgYWxpc3NhQGNvb3BlcncuaW47IGFh bWVsbmlrb3ZAZmFzdG1haWwuZm07IE1vcnRlemEgQW5zYXJpIDxtb3JhbnNhckBjaXNjby5jb20+ OyBzY2ltQGlldGYub3JnOyB6bWVlYWdhaW5AZ21haWwuY29tDQpTdWJqZWN0OiBSZTogW3NjaW1d IFtUZWNobmljYWwgRXJyYXRhIFJlcG9ydGVkXSBSRkM3NjQ0ICg0NjcwKQ0KDQpPdGhlcnM/IFNo b3VsZCB3ZSBhc2sgdGhlIHJmYyBlZGl0b3IgdG8gc3VibWl0IHRoZSBlcnJhdGEgd2l0aCBwaGls cyB0ZXh0Pw0KDQpTa2lja2F0IGZyw6VuIG1pbiBpUGhvbmUNCg0KMTAgbWFqIDIwMTYga2wuIDE5 OjUxIHNrcmV2IFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVu dEBvcmFjbGUuY29tPj46DQpBZnRlciBzb21lIHJldmlldywgSSBiZWxpZXZlIHRoaXMgZXJyYXRh IHJlcG9ydCBpcyB2YWxpZCwgaG93ZXZlciB0aGUgY29ycmVjdGl2ZSB0ZXh0IGRvZXMgbm90IGZ1 bGx5IGFkZHJlc3MgdGhlIGlzc3VlLg0KDQpUaGUgb3JpZ2luYWwgdGV4dCBtaXhlZCB0aGUgbm90 aW9uIG9mIG9yZGVyIG9yIHByb2Nlc3NpbmcgdnMuIG9yZGVyIG9mIHByZWNlZGVuY2UuIEkgaGF2 ZSBzaW1wbGlmaWVkIHRoZSBpbnRyb2R1Y3Rvcnkgc2VudGVuY2UgYW5kIGNoYW5nZWQgdGhlIG9y ZGVyIG9mIGl0ZW1zIHRvIHJlZmxlY3QgdGhlIHRleHQuIEkgYmVsaWV2ZSB0aGlzIGNvcnJlY3Rp b24gcmVmbGVjdHMgdGhlIHdheSBwZW9wbGUgaGF2ZSBpbXBsZW1lbnRlZCB0aGUgc3BlY2lmaWNh dGlvbi4NCg0KSXQgc2hvdWxkIHNheToNCi0tLS0tLS0NCkZpbHRlcnMgTVVTVCBiZSBldmFsdWF0 ZWQgdXNpbmcgdGhlIGZvbGxvd2luZyBvcmRlciBvZiBwcmVjZWRlbmNlOg0KMS4gQXR0cmlidXRl IG9wZXJhdG9ycyAoaS5lLiBlcSBuZSBjbyBzdyBldyBwciBndCBnZSBsdCBsZSkNCjIuIEdyb3Vw aW5nIG9wZXJhdG9ycw0KMy4gTG9naWNhbCBvcGVyYXRvcnMgLSB3aGVyZSDigJxub3TigJ0gdGFr ZXMgcHJlY2VkZW5jZSBvdmVyIOKAnGFuZOKAnSwgYW5kIHdoaWNoIHRha2VzIHByZWNlZGVuY2Ug b3ZlciDigJxvcuKAnQ0KLS0tLS0tLQ0KSSBoYXZlIHBsYWNlZCBncm91cGluZyBvcGVyYXRvcnMg YWhlYWQgb2YgbG9naWNhbCBvcGVyYXRvcnMgYW5kIG1hZGUgYXR0cmlidXRlIG9wZXJhdG9ycyB0 b3AgcHJpb3JpdHkuIEluIFNDSU0geW91IGNhbm5vdCB1c2Ug4oCcbm904oCdIGluIHRoZSBtaWRk bGUgb2YgYW4gYXR0cmlidXRlIGV4cHJlc3Npb24uICBUaGlzIHByb2Nlc3NpbmcgbWFrZXMgZXhw cmVzc2lvbiBsaWtlIHRoZSBmb2xsb3dpbmcgd29yazoNCg0KDQpmaWx0ZXI9dXNlclR5cGUgbmUg IkVtcGxveWVlIiBhbmQgbm90IChlbWFpbHMgY28gImV4YW1wbGUuY29tPGh0dHA6Ly9leGFtcGxl LmNvbT4iIG9yDQoNCiAgZW1haWxzLnZhbHVlIGNvICJleGFtcGxlLm9yZzxodHRwOi8vZXhhbXBs ZS5vcmc+IikNCg0KDQpQaGlsDQoNCkBpbmRlcGVuZGVudGlkDQp3d3cuaW5kZXBlbmRlbnRpZC5j b208aHR0cDovL3d3dy5pbmRlcGVuZGVudGlkLmNvbT4NCnBoaWwuaHVudEBvcmFjbGUuY29tPG1h aWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4NCg0KDQpPbiBBcHIgMTUsIDIwMTYsIGF0IDE6MjAg UE0sIFJGQyBFcnJhdGEgU3lzdGVtIDxyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPG1haWx0bzpy ZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPj4gd3JvdGU6DQoNClRoZSBmb2xsb3dpbmcgZXJyYXRh IHJlcG9ydCBoYXMgYmVlbiBzdWJtaXR0ZWQgZm9yIFJGQzc2NDQsDQoiU3lzdGVtIGZvciBDcm9z cy1kb21haW4gSWRlbnRpdHkgTWFuYWdlbWVudDogUHJvdG9jb2wiLg0KDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KWW91IG1heSByZXZpZXcgdGhlIHJlcG9ydCBiZWxv dyBhbmQgYXQ6DQpodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2VycmF0YV9zZWFyY2gucGhwP3Jm Yz03NjQ0JmVpZD00NjcwDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQpUeXBlOiBUZWNobmljYWwNClJlcG9ydGVkIGJ5OiBWYXNzaWxpcyBNaWNoYWxpdHNpcyA8em1l ZWFnYWluQGdtYWlsLmNvbTxtYWlsdG86em1lZWFnYWluQGdtYWlsLmNvbT4+DQoNClNlY3Rpb246 IDMuNC4yLjINCg0KT3JpZ2luYWwgVGV4dA0KLS0tLS0tLS0tLS0tLQ0KRmlsdGVycyBNVVNUIGJl IGV2YWx1YXRlZCB1c2luZyB0aGUgZm9sbG93aW5nIG9yZGVyIG9mIG9wZXJhdGlvbnMsIGluDQog IG9yZGVyIG9mIHByZWNlZGVuY2U6DQoNCiAgMS4gIEdyb3VwaW5nIG9wZXJhdG9ycw0KDQogIDIu ICBMb2dpY2FsIG9wZXJhdG9ycyAtIHdoZXJlICJub3QiIHRha2VzIHByZWNlZGVuY2Ugb3ZlciAi YW5kIiwNCiAgICAgIHdoaWNoIHRha2VzIHByZWNlZGVuY2Ugb3ZlciAib3IiDQoNCiAgMy4gIEF0 dHJpYnV0ZSBvcGVyYXRvcnMNCg0KQ29ycmVjdGVkIFRleHQNCi0tLS0tLS0tLS0tLS0tDQpGaWx0 ZXJzIE1VU1QgYmUgZXZhbHVhdGVkIHVzaW5nIHRoZSBmb2xsb3dpbmcgb3JkZXIgb2Ygb3BlcmF0 aW9ucywgaW4NCiAgb3JkZXIgb2YgcHJlY2VkZW5jZToNCg0KICAxLiAgR3JvdXBpbmcgb3BlcmF0 b3JzDQoNCiAgMi4gIEF0dHJpYnV0ZSBvcGVyYXRvcnMNCg0KICAzLiAgTG9naWNhbCBvcGVyYXRv cnMgLSB3aGVyZSAibm90IiB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgImFuZCIsDQogICAgICB3aGlj aCB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgIm9yIg0KDQpOb3Rlcw0KLS0tLS0NCkl0IHNlZW1zIHRo YXQgdGhlIHByZWNlZGVuY2Ugb2YgbG9naWNhbCBhbmQgYXR0cmlidXRlIHByZWNlZGVuY2UgaXMg cmV2ZXJzZWQ/IFRoZSBmaWx0ZXIgZmlsdGVyPXRpdGxlIHN3ICJNIiBhbmQgdXNlclR5cGUgZXEg IkVtcGxveWVlIiBpcyBtZWFudCB0byBiZSBpbnRlcnByZXRlZCBhcyBmaWx0ZXI9KHRpdGxlIHN3 ICJNIikgYW5kICh1c2VyVHlwZSBlcSAiRW1wbG95ZWUiKS4NClRoaXMgaXMgYWxzbyB0aGUgImV4 cGVjdGVkIiBiZWhhdmlvdXIgY29uc2lzdGVudCB3aXRoIG1vc3Qgb3RoZXIgbGFuZ3VhZ2VzIC0g d2l0aCB0aGUgbm90YWJsZSBleGNlcHRpb24gb2YgdW5hcnkgIm9yIiB3aGljaCBpbiBTQ0lNIGlz IGRpc2FtYmlndWF0ZWQgYXMgaXQgY2FuIG9ubHkgYXBwbHkgdG8gYSBwYXJlbnRoZXNpemVkIGZp bHRlciBleHByZXNzaW9uLg0KDQpJbnN0cnVjdGlvbnM6DQotLS0tLS0tLS0tLS0tDQpUaGlzIGVy cmF0dW0gaXMgY3VycmVudGx5IHBvc3RlZCBhcyAiUmVwb3J0ZWQiLiBJZiBuZWNlc3NhcnksIHBs ZWFzZQ0KdXNlICJSZXBseSBBbGwiIHRvIGRpc2N1c3Mgd2hldGhlciBpdCBzaG91bGQgYmUgdmVy aWZpZWQgb3INCnJlamVjdGVkLiBXaGVuIGEgZGVjaXNpb24gaXMgcmVhY2hlZCwgdGhlIHZlcmlm eWluZyBwYXJ0eSAoSUVTRykNCmNhbiBsb2cgaW4gdG8gY2hhbmdlIHRoZSBzdGF0dXMgYW5kIGVk aXQgdGhlIHJlcG9ydCwgaWYgbmVjZXNzYXJ5Lg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KUkZDNzY0NCAoZHJhZnQtaWV0Zi1zY2ltLWFwaS0xOSkNCi0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpUaXRsZSAgICAgICAgICAgICAgIDogU3lz dGVtIGZvciBDcm9zcy1kb21haW4gSWRlbnRpdHkgTWFuYWdlbWVudDogUHJvdG9jb2wNClB1Ymxp Y2F0aW9uIERhdGUgICAgOiBTZXB0ZW1iZXIgMjAxNQ0KQXV0aG9yKHMpICAgICAgICAgICA6IFAu IEh1bnQsIEVkLiwgSy4gR3JpenpsZSwgTS4gQW5zYXJpLCBFLiBXYWhsc3Ryb2VtLCBDLiBNb3J0 aW1vcmUNCkNhdGVnb3J5ICAgICAgICAgICAgOiBQUk9QT1NFRCBTVEFOREFSRA0KU291cmNlICAg ICAgICAgICAgICA6IFN5c3RlbSBmb3IgQ3Jvc3MtZG9tYWluIElkZW50aXR5IE1hbmFnZW1lbnQN CkFyZWEgICAgICAgICAgICAgICAgOiBBcHBsaWNhdGlvbnMgYW5kIFJlYWwtVGltZQ0KU3RyZWFt ICAgICAgICAgICAgICA6IElFVEYNClZlcmlmeWluZyBQYXJ0eSAgICAgOiBJRVNHDQoNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzY2ltIG1haWxpbmcg bGlzdA0Kc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbQ0KDQo= --_000_CY1PR04MB236389514D2C4D2B6D7194E1E2720CY1PR04MB2363namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDEx IDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0 dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkhUTUxQcmVm b3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsN Cgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0 dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLmFwcGxlLXN0eWxlLXNwYW4NCgl7 bXNvLXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9 DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlk bWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0 YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxi b2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+SeKAmW0gaGFwcHkgd2l0aCBQaGls4oCZcyBzdWdnZXN0aW9uLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gTGVpZiBKb2hhbnNzb24gW21haWx0 bzpsZWlmakBzdW5ldC5zZV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBNYXkgMTAsIDIw MTYgMTI6NTUgUE08YnI+DQo8Yj5Ubzo8L2I+IFBoaWwgSHVudCAmbHQ7cGhpbC5odW50QG9yYWNs ZS5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBSRkMgRXJyYXRhIFN5c3RlbSAmbHQ7cmZjLWVkaXRv ckByZmMtZWRpdG9yLm9yZyZndDs7IEtlbGx5IEdyaXp6bGUgJmx0O2tlbGx5LmdyaXp6bGVAc2Fp bHBvaW50LmNvbSZndDs7IG1vcnRlemEuYW5zYXJpQGNpc2NvLmNvbTsgZXJpay53YWhsc3Ryb21A bmV4dXNncm91cC5jb207IENodWNrIE1vcnRpbW9yZSAmbHQ7Y21vcnRpbW9yZUBzYWxlc2ZvcmNl LmNvbSZndDs7IGJlbkBub3N0cnVtLmNvbTsgYWxpc3NhQGNvb3BlcncuaW47IGFhbWVsbmlrb3ZA ZmFzdG1haWwuZm07DQogTW9ydGV6YSBBbnNhcmkgJmx0O21vcmFuc2FyQGNpc2NvLmNvbSZndDs7 IHNjaW1AaWV0Zi5vcmc7IHptZWVhZ2FpbkBnbWFpbC5jb208YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UmU6IFtzY2ltXSBbVGVjaG5pY2FsIEVycmF0YSBSZXBvcnRlZF0gUkZDNzY0NCAoNDY3MCk8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T3RoZXJz PyBTaG91bGQgd2UgYXNrIHRoZSByZmMgZWRpdG9yIHRvIHN1Ym1pdCB0aGUgZXJyYXRhIHdpdGgg cGhpbHMgdGV4dD88YnI+DQo8YnI+DQpTa2lja2F0IGZyw6VuIG1pbiBpUGhvbmU8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PGJyPg0KMTAgbWFqIDIwMTYga2wuIDE5OjUxIHNrcmV2IFBoaWwgSHVu dCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIj5waGlsLmh1bnRAb3Jh Y2xlLmNvbTwvYT4mZ3Q7OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5BZnRlciBzb21lIHJldmlldywgSSBiZWxpZXZlIHRoaXMgZXJyYXRhIHJl cG9ydCBpcyB2YWxpZCwgaG93ZXZlciB0aGUgY29ycmVjdGl2ZSB0ZXh0IGRvZXMgbm90IGZ1bGx5 IGFkZHJlc3MgdGhlIGlzc3VlLiAmbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoZSBvcmlnaW5hbCB0ZXh0IG1peGVkIHRoZSBub3Rpb24gb2Ygb3Jk ZXIgb3IgcHJvY2Vzc2luZyB2cy4gb3JkZXIgb2YgcHJlY2VkZW5jZS4gSSBoYXZlIHNpbXBsaWZp ZWQgdGhlIGludHJvZHVjdG9yeSBzZW50ZW5jZSBhbmQgY2hhbmdlZCB0aGUgb3JkZXIgb2YgaXRl bXMgdG8gcmVmbGVjdCB0aGUgdGV4dC4gSSBiZWxpZXZlIHRoaXMgY29ycmVjdGlvbiByZWZsZWN0 cyB0aGUgd2F5IHBlb3BsZSBoYXZlIGltcGxlbWVudGVkDQogdGhlIHNwZWNpZmljYXRpb24uPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkl0IHNo b3VsZCBzYXk6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4tLS0tLS0tPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+RmlsdGVycyBNVVNUIGJlIGV2YWx1YXRlZCB1c2luZyB0aGUgZm9s bG93aW5nIG9yZGVyIG9mIHByZWNlZGVuY2U6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjEuIEF0dHJpYnV0ZSBvcGVy YXRvcnMgKGkuZS4gZXEgbmUgY28gc3cgZXcgcHIgZ3QgZ2UgbHQgbGUpPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjIu IEdyb3VwaW5nIG9wZXJhdG9yczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+My4gTG9naWNhbCBvcGVyYXRv cnMgLSB3aGVyZSDigJxub3TigJ0gdGFrZXMgcHJlY2VkZW5jZSBvdmVyIOKAnGFuZOKAnSwgYW5k IHdoaWNoIHRha2VzIHByZWNlZGVuY2Ugb3ZlciDigJxvcuKAnTwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LS0tLS0tLTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZl IHBsYWNlZCBncm91cGluZyBvcGVyYXRvcnMgYWhlYWQgb2YgbG9naWNhbCBvcGVyYXRvcnMgYW5k IG1hZGUgYXR0cmlidXRlIG9wZXJhdG9ycyB0b3AgcHJpb3JpdHkuIEluIFNDSU0geW91IGNhbm5v dCB1c2Ug4oCcbm904oCdIGluIHRoZSBtaWRkbGUgb2YgYW4gYXR0cmlidXRlIGV4cHJlc3Npb24u ICZuYnNwO1RoaXMgcHJvY2Vzc2luZyBtYWtlcyBleHByZXNzaW9uIGxpa2UgdGhlIGZvbGxvd2lu ZyB3b3JrOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cHJlIHN0eWxlPSJwYWdl LWJyZWFrLWJlZm9yZTphbHdheXMiPmZpbHRlcj11c2VyVHlwZSBuZSAmcXVvdDtFbXBsb3llZSZx dW90OyBhbmQgbm90IChlbWFpbHMgY28gJnF1b3Q7PGEgaHJlZj0iaHR0cDovL2V4YW1wbGUuY29t Ij5leGFtcGxlLmNvbTwvYT4mcXVvdDsgb3I8bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0i cGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj4mbmJzcDsgZW1haWxzLnZhbHVlIGNvICZxdW90Ozxh IGhyZWY9Imh0dHA6Ly9leGFtcGxlLm9yZyI+ZXhhbXBsZS5vcmc8L2E+JnF1b3Q7KTxvOnA+PC9v OnA+PC9wcmU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPlBoaWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+QGluZGVwZW5kZW50aWQ8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPjxhIGhyZWY9Imh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20iPnd3 dy5pbmRlcGVuZGVudGlkLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjayI+PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIj5waGlsLmh1 bnRAb3JhY2xlLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+T24gQXByIDE1LCAyMDE2LCBhdCAxOjIwIFBNLCBSRkMgRXJyYXRh IFN5c3RlbSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJmYy1lZGl0b3JAcmZjLWVkaXRvci5vcmciPnJm Yy1lZGl0b3JAcmZjLWVkaXRvci5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBmb2xsb3dpbmcgZXJyYXRhIHJlcG9ydCBo YXMgYmVlbiBzdWJtaXR0ZWQgZm9yIFJGQzc2NDQsPGJyPg0KJnF1b3Q7U3lzdGVtIGZvciBDcm9z cy1kb21haW4gSWRlbnRpdHkgTWFuYWdlbWVudDogUHJvdG9jb2wmcXVvdDsuPGJyPg0KPGJyPg0K LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnI+DQpZb3UgbWF5IHJldmll dyB0aGUgcmVwb3J0IGJlbG93IGFuZCBhdDo8YnI+DQo8YSBocmVmPSJodHRwOi8vd3d3LnJmYy1l ZGl0b3Iub3JnL2VycmF0YV9zZWFyY2gucGhwP3JmYz03NjQ0JmFtcDtlaWQ9NDY3MCI+aHR0cDov L3d3dy5yZmMtZWRpdG9yLm9yZy9lcnJhdGFfc2VhcmNoLnBocD9yZmM9NzY0NCZhbXA7ZWlkPTQ2 NzA8L2E+PGJyPg0KPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08 YnI+DQpUeXBlOiBUZWNobmljYWw8YnI+DQpSZXBvcnRlZCBieTogVmFzc2lsaXMgTWljaGFsaXRz aXMgJmx0OzxhIGhyZWY9Im1haWx0bzp6bWVlYWdhaW5AZ21haWwuY29tIj56bWVlYWdhaW5AZ21h aWwuY29tPC9hPiZndDs8YnI+DQo8YnI+DQpTZWN0aW9uOiAzLjQuMi4yPGJyPg0KPGJyPg0KT3Jp Z2luYWwgVGV4dDxicj4NCi0tLS0tLS0tLS0tLS08YnI+DQpGaWx0ZXJzIE1VU1QgYmUgZXZhbHVh dGVkIHVzaW5nIHRoZSBmb2xsb3dpbmcgb3JkZXIgb2Ygb3BlcmF0aW9ucywgaW48YnI+DQombmJz cDsmbmJzcDtvcmRlciBvZiBwcmVjZWRlbmNlOjxicj4NCjxicj4NCiZuYnNwOyZuYnNwOzEuICZu YnNwO0dyb3VwaW5nIG9wZXJhdG9yczxicj4NCjxicj4NCiZuYnNwOyZuYnNwOzIuICZuYnNwO0xv Z2ljYWwgb3BlcmF0b3JzIC0gd2hlcmUgJnF1b3Q7bm90JnF1b3Q7IHRha2VzIHByZWNlZGVuY2Ug b3ZlciAmcXVvdDthbmQmcXVvdDssPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7d2hpY2ggdGFrZXMgcHJlY2VkZW5jZSBvdmVyICZxdW90O29yJnF1b3Q7PGJyPg0KPGJy Pg0KJm5ic3A7Jm5ic3A7My4gJm5ic3A7QXR0cmlidXRlIG9wZXJhdG9yczxicj4NCjxicj4NCkNv cnJlY3RlZCBUZXh0PGJyPg0KLS0tLS0tLS0tLS0tLS08YnI+DQpGaWx0ZXJzIE1VU1QgYmUgZXZh bHVhdGVkIHVzaW5nIHRoZSBmb2xsb3dpbmcgb3JkZXIgb2Ygb3BlcmF0aW9ucywgaW48YnI+DQom bmJzcDsmbmJzcDtvcmRlciBvZiBwcmVjZWRlbmNlOjxicj4NCjxicj4NCiZuYnNwOyZuYnNwOzEu ICZuYnNwO0dyb3VwaW5nIG9wZXJhdG9yczxicj4NCjxicj4NCiZuYnNwOyZuYnNwOzIuICZuYnNw O0F0dHJpYnV0ZSBvcGVyYXRvcnM8YnI+DQo8YnI+DQombmJzcDsmbmJzcDszLiAmbmJzcDtMb2dp Y2FsIG9wZXJhdG9ycyAtIHdoZXJlICZxdW90O25vdCZxdW90OyB0YWtlcyBwcmVjZWRlbmNlIG92 ZXIgJnF1b3Q7YW5kJnF1b3Q7LDxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwO3doaWNoIHRha2VzIHByZWNlZGVuY2Ugb3ZlciAmcXVvdDtvciZxdW90Ozxicj4NCjxicj4N Ck5vdGVzPGJyPg0KLS0tLS08YnI+DQpJdCBzZWVtcyB0aGF0IHRoZSBwcmVjZWRlbmNlIG9mIGxv Z2ljYWwgYW5kIGF0dHJpYnV0ZSBwcmVjZWRlbmNlIGlzIHJldmVyc2VkPyBUaGUgZmlsdGVyIGZp bHRlcj10aXRsZSBzdyAmcXVvdDtNJnF1b3Q7IGFuZCB1c2VyVHlwZSBlcSAmcXVvdDtFbXBsb3ll ZSZxdW90OyBpcyBtZWFudCB0byBiZSBpbnRlcnByZXRlZCBhcyBmaWx0ZXI9KHRpdGxlIHN3ICZx dW90O00mcXVvdDspIGFuZCAodXNlclR5cGUgZXEgJnF1b3Q7RW1wbG95ZWUmcXVvdDspLg0KPGJy Pg0KVGhpcyBpcyBhbHNvIHRoZSAmcXVvdDtleHBlY3RlZCZxdW90OyBiZWhhdmlvdXIgY29uc2lz dGVudCB3aXRoIG1vc3Qgb3RoZXIgbGFuZ3VhZ2VzIC0gd2l0aCB0aGUgbm90YWJsZSBleGNlcHRp b24gb2YgdW5hcnkgJnF1b3Q7b3ImcXVvdDsgd2hpY2ggaW4gU0NJTSBpcyBkaXNhbWJpZ3VhdGVk IGFzIGl0IGNhbiBvbmx5IGFwcGx5IHRvIGEgcGFyZW50aGVzaXplZCBmaWx0ZXIgZXhwcmVzc2lv bi48YnI+DQo8YnI+DQpJbnN0cnVjdGlvbnM6PGJyPg0KLS0tLS0tLS0tLS0tLTxicj4NClRoaXMg ZXJyYXR1bSBpcyBjdXJyZW50bHkgcG9zdGVkIGFzICZxdW90O1JlcG9ydGVkJnF1b3Q7LiBJZiBu ZWNlc3NhcnksIHBsZWFzZTxicj4NCnVzZSAmcXVvdDtSZXBseSBBbGwmcXVvdDsgdG8gZGlzY3Vz cyB3aGV0aGVyIGl0IHNob3VsZCBiZSB2ZXJpZmllZCBvcjxicj4NCnJlamVjdGVkLiBXaGVuIGEg ZGVjaXNpb24gaXMgcmVhY2hlZCwgdGhlIHZlcmlmeWluZyBwYXJ0eSAoSUVTRyk8YnI+DQpjYW4g bG9nIGluIHRvIGNoYW5nZSB0aGUgc3RhdHVzIGFuZCBlZGl0IHRoZSByZXBvcnQsIGlmIG5lY2Vz c2FyeS4gPGJyPg0KPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08 YnI+DQpSRkM3NjQ0IChkcmFmdC1pZXRmLXNjaW0tYXBpLTE5KTxicj4NCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KVGl0bGUgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7OiBTeXN0ZW0gZm9yIENyb3NzLWRvbWFpbiBJZGVudGl0eSBNYW5hZ2VtZW50OiBQcm90 b2NvbDxicj4NClB1YmxpY2F0aW9uIERhdGUgJm5ic3A7Jm5ic3A7Jm5ic3A7OiBTZXB0ZW1iZXIg MjAxNTxicj4NCkF1dGhvcihzKSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IFAuIEh1bnQsIEVkLiwgSy4gR3JpenpsZSwgTS4gQW5z YXJpLCBFLiBXYWhsc3Ryb2VtLCBDLiBNb3J0aW1vcmU8YnI+DQpDYXRlZ29yeSAmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6 IFBST1BPU0VEIFNUQU5EQVJEPGJyPg0KU291cmNlICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogU3lz dGVtIGZvciBDcm9zcy1kb21haW4gSWRlbnRpdHkgTWFuYWdlbWVudDxicj4NCkFyZWEgJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBBcHBsaWNhdGlvbnMgYW5kIFJlYWwtVGltZTxi cj4NClN0cmVhbSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IElFVEY8YnI+DQpWZXJpZnlpbmcgUGFy dHkgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBJRVNHPGJyPg0KPGJyPg0KX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzY2ltIG1haWxpbmcgbGlz dDxicj4NCjxhIGhyZWY9Im1haWx0bzpzY2ltQGlldGYub3JnIj5zY2ltQGlldGYub3JnPC9hPjxi cj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbSI+ aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltPC9hPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_CY1PR04MB236389514D2C4D2B6D7194E1E2720CY1PR04MB2363namp_-- From nobody Wed May 11 00:47:53 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E0C012B033 for ; Tue, 10 May 2016 18:56:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.716 X-Spam-Level: X-Spam-Status: No, score=-3.716 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DsPZlaLXBnlh for ; Tue, 10 May 2016 18:56:21 -0700 (PDT) Received: from nm20-vm4.bullet.mail.ne1.yahoo.com (nm20-vm4.bullet.mail.ne1.yahoo.com [98.138.91.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 598D512B02A for ; Tue, 10 May 2016 18:56:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1462931780; bh=EpObx4weKnANPOZbKWIaPOv4WrUfNLdIyZ2YkbfGuvQ=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject; b=qucm6xapeMPoWmWcADF0ZbM7EtVCLbrit9NukeHmT/qpEo+y8OBjCGSZsjHtMNf6jFkE31XH+/pzzxAO+eUo8xLAjgWs01IoVB2fPet8h9pnlYcNyJpyWbXUP/t6TS2sqyfOCl/wXu9Jxdd3NwYfoPBepcjswNOQ9FelSfP0g7L21GkkKvKlm9RotDQo/S1XxcVt3X2HgI/F7HMZjuIawxpOVT13yErkEWlEvchBbb2fAeZ02urYGfwuzdelsWmHYy58RowgHPxVN3pC1ekgSQdQ8ep1ftQjKJzkMHQ3OvXJ/A4a7sx27f1irxWCybfVKFqL65yD56eOsZEUHEGjQg== Received: from [98.138.101.132] by nm20.bullet.mail.ne1.yahoo.com with NNFMP; 11 May 2016 01:56:20 -0000 Received: from [98.138.84.47] by tm20.bullet.mail.ne1.yahoo.com with NNFMP; 11 May 2016 01:56:20 -0000 Received: from [127.0.0.1] by smtp115.mail.ne1.yahoo.com with NNFMP; 11 May 2016 01:56:20 -0000 X-Yahoo-Newman-Id: 659036.40760.bm@smtp115.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: iAF4p20VM1kuW_sFcTrSsOQhlQE1tpPby66aLosnl8nvwCR Sof3XTE03WfWPnkSqDdQSudwWjjkEYKL2TKXX8BYxx6eK38tDT_GBq.mDI.s btkdqNCakk1c8TrAqXXpWnLvnWvdYf59VTz9rBJ5U6yq697dGCYSrfmRs_cR dCZr0yrqgcaW.rel8cN6f3vFj32oUPc8R6g29Lx3aV.nSjmoR8i4dYd5zkHV MZwapv0SzDMt._VIly49tatlXsBdRnnqVm5ENdv19qYyZqWZuxI8MOBxEFZd FlIBuAwLQf_41EuW4zW6H6t9H0uRTT2.MxtMQrCVwKQphEL.l486KJ3Xz3nf xZWCotFgJSYd75shO71ldpcySRD59wQFALyc4ARp2bd54PI9vEZy03x6yyqd 0aenokhnH3UzS5104tLxgqwjRHVwFr9N5PG42hLClgEmNQqwzVyx1vcrgv2j 5eMgm1Vgd1avfWDiLIUHeLAIE9FXHv_6dZt9_cNuDkCEcjRJAXapRqmgHZOt lKAbGQbvScejbRQi4lUECJ6EK.VOLHOAS6RTRIg-- X-Yahoo-SMTP: 5ZG1WouswBA_I3TiUVQ.pojpE5jY8w-- Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (13E238) In-Reply-To: <20160510224750.BF421180004@rfc-editor.org> Date: Tue, 10 May 2016 18:56:15 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20160510224750.BF421180004@rfc-editor.org> To: RFC Errata System Archived-At: X-Mailman-Approved-At: Wed, 11 May 2016 00:47:47 -0700 Cc: ben@nostrum.com, aamelnikov@fastmail.fm, morteza.ansari@cisco.com, alissa@cooperw.in, leifj@sunet.se, scim@ietf.org, kelly.grizzle@sailpoint.com, erik.wahlstrom@nexusgroup.com, moransar@cisco.com, cmortimore@salesforce.com Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4690) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 01:56:23 -0000 FYI. This is the issue raised by Steve Moyer.=20 I agree this too should go to the RFC editor should others agree.=20 Phil > On May 10, 2016, at 15:47, RFC Errata System w= rote: >=20 > The following errata report has been submitted for RFC7644, > "System for Cross-domain Identity Management: Protocol". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=3D7644&eid=3D4690 >=20 > -------------------------------------- > Type: Technical > Reported by: Phil Hunt >=20 > Section: 3.4.2.2 >=20 > Original Text > ------------- > valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")" >=20 > Corrected Text > -------------- > valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" >=20 > valLogExp =3D attrExp SP ("and" / "or") SP attrExp >=20 > Notes > ----- > Figure 1 contains the ABNF for SCIM filters. The term "logExp" specifies "= FILTER" as an option which unintentionally allows recursion. A valFilter sho= uld only allow simple sub-attribute expressions and simple logic. Nesting o= f valuePath (e.g. attr[a eq b and attr[c eq d]]) should not be possible. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party (IESG) > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC7644 (draft-ietf-scim-api-19) > -------------------------------------- > Title : System for Cross-domain Identity Management: Protoco= l > Publication Date : September 2015 > Author(s) : P. Hunt, Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C= . Mortimore > Category : PROPOSED STANDARD > Source : System for Cross-domain Identity Management > Area : Applications and Real-Time > Stream : IETF > Verifying Party : IESG >=20 From nobody Wed May 11 08:10:09 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FE812D6C9 for ; Wed, 11 May 2016 07:28:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.196 X-Spam-Level: X-Spam-Status: No, score=-5.196 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AT1QzC0x3Y98 for ; Wed, 11 May 2016 07:28:29 -0700 (PDT) Received: from tr21g10.aset.psu.edu (tr21g10.aset.psu.edu [146.186.149.132]) by ietfa.amsl.com (Postfix) with ESMTP id AC7F312DB16 for ; Wed, 11 May 2016 07:28:27 -0700 (PDT) Received: from ucs20.ait.psu.edu (ucs20.ait.psu.edu [128.118.73.22]) by tr21g10.aset.psu.edu (8.14.3/8.14.3) with ESMTP id u4BESLe33592286; Wed, 11 May 2016 10:28:22 -0400 Date: Wed, 11 May 2016 10:28:20 -0400 (EDT) From: Christopher Harm To: RFC Errata System Message-ID: <1599821528.4999061.1462976900817.JavaMail.zimbra@psu.edu> In-Reply-To: <20160510224750.BF421180004@rfc-editor.org> References: <20160510224750.BF421180004@rfc-editor.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Originating-IP: [128.118.110.171] X-Mailer: Zimbra 8.6.0_GA_1194 (ZimbraWebClient - GC49 (Linux)/8.6.0_GA_1194) Thread-Topic: RFC7644 (4690) Thread-Index: tXkMaUhcNniMMoH7DZBpPmnB7mT3fw== X-Virus-Scanned: by amavisd-new Archived-At: X-Mailman-Approved-At: Wed, 11 May 2016 08:10:07 -0700 Cc: ben@nostrum.com, aamelnikov@fastmail.fm, morteza ansari , phil hunt , alissa@cooperw.in, leifj@sunet.se, scim@ietf.org, kelly grizzle , erik wahlstrom , moransar@cisco.com, cmortimore@salesforce.com Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4690) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 14:28:32 -0000 Phil, Doesn't the correction text prevent attr[a eq b and c eq d and e eq f]. =C2= =A0valLogExp has no way to recurse back up and allow more than a simple log= ic expression. I presume that attr[a eq b and c eq d and e eq f] should be = allowed. =C2=A0I think that the valLogExp should refer back to the valFilte= r so that it can recurse back up and include another valLogExp if necessary= . Corrected Text -------------- valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" valLogExp =3D valFilter SP ("and" / "or") SP valFilter -Chris -- Christopher Harm Penn State University 221 Technology Support Building 300 Science Park Road State College, PA 16803 814-863-3366 https://keybase.io/christopherharm ----- Original Message ----- From: "RFC Errata System" To: "phil hunt" , "kelly grizzle" , "morteza ansari" , "erik wahlstrom" , cmortimore@salesforce.com, ben@nostrum.com, = alissa@cooperw.in, aamelnikov@fastmail.fm, moransar@cisco.com, leifj@sunet.= se Cc: scim@ietf.org, "phil hunt" , rfc-editor@rfc-editor= .org Sent: Tuesday, May 10, 2016 6:47:50 PM Subject: [scim] [Technical Errata Reported] RFC7644 (4690) The following errata report has been submitted for RFC7644, "System for Cross-domain Identity Management: Protocol". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=3D7644&eid=3D4690 -------------------------------------- Type: Technical Reported by: Phil Hunt Section: 3.4.2.2 Original Text ------------- valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")" Corrected Text -------------- valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" valLogExp =3D attrExp SP ("and" / "or") SP attrExp Notes ----- Figure 1 contains the ABNF for SCIM filters. The term "logExp" specifies "F= ILTER" as an option which unintentionally allows recursion. A valFilter sho= uld only allow simple sub-attribute expressions and simple logic. =C2=A0Nes= ting of valuePath (e.g. attr[a eq b and attr[c eq d]]) should not be possib= le. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary.=20 -------------------------------------- RFC7644 (draft-ietf-scim-api-19) -------------------------------------- Title =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : System for Cross-d= omain Identity Management: Protocol Publication Date =C2=A0 =C2=A0: September 2015 Author(s) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : P. Hunt, Ed., K. Grizzle, M.= Ansari, E. Wahlstroem, C. Mortimore Category =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: PROPOSED STANDARD Source =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: System for Cross-d= omain Identity Management Area =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Applications = and Real-Time Stream =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: IETF Verifying Party =C2=A0 =C2=A0 : IESG _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim From nobody Wed May 11 08:34:44 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AB4C12D19B for ; Wed, 11 May 2016 08:31:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.697 X-Spam-Level: X-Spam-Status: No, score=-3.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4-eSNCbedOPi for ; Wed, 11 May 2016 08:31:54 -0700 (PDT) Received: from nm26-vm5.bullet.mail.ne1.yahoo.com (nm26-vm5.bullet.mail.ne1.yahoo.com [98.138.91.248]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F127812D142 for ; Wed, 11 May 2016 08:31:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1462980713; bh=rUO8U8jmV1Scd9StG9p/gLiXs8WD3Ub+sk7vXatZNcw=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject; b=oY4qzyCt3EyNtGcMtQOPQWzmyDiti78ba6m8Nco3bhKzvGC7ebTR0IrHkTFcYx2VovC21ULN9BLo0V306Sa6Ol/8zRGTxR9o3xKMeYKtrF/IZiZ2wqVjp99piPdeJoFy2B7V1hwmehqYQ1sPFjydgnJGlShjntC4ZanjhOirTSngZe0mH+iIaJ1jYXv3BeDeD8Iyi3vbUdmzAWU3br3t6HpKBGBJYRw8qqyuEB/u8Ys8yotzn7bt2JqXCg1tTpA/5M2b3zHcBxoiGTZ08kweFVGNXLBBg+DDvaq+UHuL5FzF9MAXWpefrbhLSrwljXhUye/gyvCRcfBfM5MpD84bBw== Received: from [98.138.100.111] by nm26.bullet.mail.ne1.yahoo.com with NNFMP; 11 May 2016 15:31:53 -0000 Received: from [98.138.84.37] by tm100.bullet.mail.ne1.yahoo.com with NNFMP; 11 May 2016 15:31:53 -0000 Received: from [127.0.0.1] by smtp105.mail.ne1.yahoo.com with NNFMP; 11 May 2016 15:31:53 -0000 X-Yahoo-Newman-Id: 264297.41213.bm@smtp105.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: 65j64rEVM1m9Cqkkv1IzzFp3hLYE3OiADAbfq3PFyNHGpkl bORbVxpqT4q4BkAQpRyRmwsWlyLU3vi9IOgCtP3lHvvf_SqS4JKVlm4mFBLN YX6dxm.WYq5Bv9tBvq2lhb87NtWmgkBzA9bGjk.mW2pvkJz81TjCgDA64eqX e38JmkVqchKi3MclczfR7IiZ6KRcFgtl.KtCuT2d_WBqmh9zLOAQOKWiKHhm 5uDGqWs0kvU.Hm1eCTUE0DZ.cP8KqGH1C64bkSAjq7z6nevgF2JjsaXRfEA2 wGTk59C8nm7Ot6UpN3NKcyrc1bpFcO9uVRrs9J1SmevrPR6Qis4uN6mC5oQk mwAKrrqaHy4EI0eRN8eP8rP9tMcyoiJx5aMK_nboKR3NXU4NEj.gzeoxkESD 7oPe7F7srr9OA.cIz5KgbA4XG7qy.khqyCX8pZcpW1xHuq9zwExqzioX0B3L UYHoekag5fH00pjGiXaWH.Vsi990oQn3oODHzv8rZdi9wWQIdeEaXozOQkBr wZuEQDKjKK7QO_ZV1jM2WnELq.mymc59H X-Yahoo-SMTP: 5ZG1WouswBA_I3TiUVQ.pojpE5jY8w-- Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (13E238) In-Reply-To: <1599821528.4999061.1462976900817.JavaMail.zimbra@psu.edu> Date: Wed, 11 May 2016 08:31:52 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <6E286398-4F27-4082-BDA3-9FB84262CE5C@yahoo.com> References: <20160510224750.BF421180004@rfc-editor.org> <1599821528.4999061.1462976900817.JavaMail.zimbra@psu.edu> To: Christopher Harm Archived-At: X-Mailman-Approved-At: Wed, 11 May 2016 08:34:43 -0700 Cc: ben@nostrum.com, aamelnikov@fastmail.fm, morteza ansari , alissa@cooperw.in, leifj@sunet.se, scim@ietf.org, kelly grizzle , erik wahlstrom , moransar@cisco.com, cmortimore@salesforce.com, RFC Errata System Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4690) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 15:31:56 -0000 That is what valLogExp does. It allows another valFilter which could be anot= her and or or clause.=20 Phil > On May 11, 2016, at 07:28, Christopher Harm wrote: >=20 > Phil, > Doesn't the correction text prevent attr[a eq b and c eq d and e eq f]. v= alLogExp has no way to recurse back up and allow more than a simple logic ex= pression. I presume that attr[a eq b and c eq d and e eq f] should be allowe= d. I think that the valLogExp should refer back to the valFilter so that it= can recurse back up and include another valLogExp if necessary. >=20 > Corrected Text > -------------- > valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" >=20 > valLogExp =3D valFilter SP ("and" / "or") SP valFilter >=20 >=20 > -Chris >=20 >=20 > -- > Christopher Harm > Penn State University > 221 Technology Support Building > 300 Science Park Road > State College, PA 16803 > 814-863-3366 >=20 > https://keybase.io/christopherharm >=20 > ----- Original Message ----- > From: "RFC Errata System" > To: "phil hunt" , "kelly grizzle" , "morteza ansari" , "erik wahlstrom" , cmortimore@salesforce.com, ben@nostrum.com, a= lissa@cooperw.in, aamelnikov@fastmail.fm, moransar@cisco.com, leifj@sunet.se= > Cc: scim@ietf.org, "phil hunt" , rfc-editor@rfc-edito= r.org > Sent: Tuesday, May 10, 2016 6:47:50 PM > Subject: [scim] [Technical Errata Reported] RFC7644 (4690) >=20 > The following errata report has been submitted for RFC7644, > "System for Cross-domain Identity Management: Protocol". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=3D7644&eid=3D4690 >=20 > -------------------------------------- > Type: Technical > Reported by: Phil Hunt >=20 > Section: 3.4.2.2 >=20 > Original Text > ------------- > valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")" >=20 > Corrected Text > -------------- > valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" >=20 > valLogExp =3D attrExp SP ("and" / "or") SP attrExp >=20 > Notes > ----- > Figure 1 contains the ABNF for SCIM filters. The term "logExp" specifies "= FILTER" as an option which unintentionally allows recursion. A valFilter sho= uld only allow simple sub-attribute expressions and simple logic. Nesting o= f valuePath (e.g. attr[a eq b and attr[c eq d]]) should not be possible. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party (IESG) > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC7644 (draft-ietf-scim-api-19) > -------------------------------------- > Title : System for Cross-domain Identity Management: Protoco= l > Publication Date : September 2015 > Author(s) : P. Hunt, Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C= . Mortimore > Category : PROPOSED STANDARD > Source : System for Cross-domain Identity Management > Area : Applications and Real-Time > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Wed May 11 08:34:46 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46C1512D1B5 for ; Wed, 11 May 2016 08:33:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.716 X-Spam-Level: X-Spam-Status: No, score=-3.716 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L5WetOcdnOJ1 for ; Wed, 11 May 2016 08:33:48 -0700 (PDT) Received: from nm5-vm4.bullet.mail.ne1.yahoo.com (nm5-vm4.bullet.mail.ne1.yahoo.com [98.138.91.165]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4C4012B008 for ; Wed, 11 May 2016 08:33:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1462980828; bh=UqwsT+KIcq4BjEToLo1IHYZvAb6vcwdGxxgANhtYKXw=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject; b=dvKESnmer8L9joUdyaWzwpyvDtitT2KyMnNlc00U7kNmKT2gV4ValcuIsFMunRxqG/dw9qCnYex8un6UCPCvC62oON0uuEkPyynr7KcoYLz8vLKvLJQD3necbAjDM60rVF+lA/HcJXuCoW89tgXTdttkSowYqwuQNSiIWI9ITHZOemIrqer2D3g7+KkMy3vBPf2oCICHIgWYEOmakPqUaYejRW8n8fhvmBNrTDuWcZg405JZDZUG7LQ7e4ydJTUD6fgJNHSSS3GLmVeOq5p57QcKwnKZza6BsFRXQeMt6713TGX6/Xpbt8WZkZczRtfV55GacHNbmDL1iJfqA4jPog== Received: from [98.138.100.114] by nm5.bullet.mail.ne1.yahoo.com with NNFMP; 11 May 2016 15:33:48 -0000 Received: from [98.138.226.60] by tm105.bullet.mail.ne1.yahoo.com with NNFMP; 11 May 2016 15:32:48 -0000 Received: from [127.0.0.1] by smtp211.mail.ne1.yahoo.com with NNFMP; 11 May 2016 15:32:47 -0000 X-Yahoo-Newman-Id: 994265.18039.bm@smtp211.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: lL6o03cVM1mljzojUlHGnWGTrPgmK3jqGn3vlwx1bJVziT5 SW86XCtvt7vrE0WRJkewg_0t8Z..0MO1vO7efIMFL9FP6gEkVrYRo4_1C1XD 4KTcjLF9qQGo5mIC15s6b_5VNqbW6uQdvy4WpO5G7x9kfX7yfkcqK0S.V.te XhUfWInHMJ2Yk0znN8VwKzA.Emj0hDuyW3g_grNTUdFNhBDz49PYbDAH3XkG MxJveoT31AzMfcp2DLXha9DpcaqiVZ.YhIscEUJb6iJhXUwRQh4BM_iCJD_r T0dfD3b7rG_G51.aq587J4mNQEjcQDlXrIngBT8jUE4JCKccXxGxrWDPARk8 Bi2sZbP8wQFMONc3vtDM1fN0wg7vuWIkq6.27wBI1RLXY2HWdwAeLc1.pPSK UIJs6Ta5g_KZMo5IJF4z.jav_tWVbI3ply8KZU46O2ltLzGTG5Jm.yY7_iAW IoXcNFDAvis4o7p8hBaV_9cwloDb3ukHjaALWJdp72OzkXnsXiXd5cPhgc7F bQoEw8QigIxkE2ela_2od1K..Pzcs7gKb X-Yahoo-SMTP: 5ZG1WouswBA_I3TiUVQ.pojpE5jY8w-- Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (13E238) In-Reply-To: <1599821528.4999061.1462976900817.JavaMail.zimbra@psu.edu> Date: Wed, 11 May 2016 08:32:46 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <8F009CCE-D3F2-48BC-8A5D-9A522E2F5425@yahoo.com> References: <20160510224750.BF421180004@rfc-editor.org> <1599821528.4999061.1462976900817.JavaMail.zimbra@psu.edu> To: Christopher Harm Archived-At: X-Mailman-Approved-At: Wed, 11 May 2016 08:34:43 -0700 Cc: ben@nostrum.com, aamelnikov@fastmail.fm, morteza ansari , alissa@cooperw.in, leifj@sunet.se, scim@ietf.org, kelly grizzle , erik wahlstrom , moransar@cisco.com, cmortimore@salesforce.com, RFC Errata System Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4690) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 15:33:51 -0000 Chris, Ignore my last.=20 The second line should be as you expressed it! Phil > On May 11, 2016, at 07:28, Christopher Harm wrote: >=20 > Phil, > Doesn't the correction text prevent attr[a eq b and c eq d and e eq f]. v= alLogExp has no way to recurse back up and allow more than a simple logic ex= pression. I presume that attr[a eq b and c eq d and e eq f] should be allowe= d. I think that the valLogExp should refer back to the valFilter so that it= can recurse back up and include another valLogExp if necessary. >=20 > Corrected Text > -------------- > valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" >=20 > valLogExp =3D valFilter SP ("and" / "or") SP valFilter >=20 >=20 > -Chris >=20 >=20 > -- > Christopher Harm > Penn State University > 221 Technology Support Building > 300 Science Park Road > State College, PA 16803 > 814-863-3366 >=20 > https://keybase.io/christopherharm >=20 > ----- Original Message ----- > From: "RFC Errata System" > To: "phil hunt" , "kelly grizzle" , "morteza ansari" , "erik wahlstrom" , cmortimore@salesforce.com, ben@nostrum.com, a= lissa@cooperw.in, aamelnikov@fastmail.fm, moransar@cisco.com, leifj@sunet.se= > Cc: scim@ietf.org, "phil hunt" , rfc-editor@rfc-edito= r.org > Sent: Tuesday, May 10, 2016 6:47:50 PM > Subject: [scim] [Technical Errata Reported] RFC7644 (4690) >=20 > The following errata report has been submitted for RFC7644, > "System for Cross-domain Identity Management: Protocol". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=3D7644&eid=3D4690 >=20 > -------------------------------------- > Type: Technical > Reported by: Phil Hunt >=20 > Section: 3.4.2.2 >=20 > Original Text > ------------- > valFilter =3D attrExp / logExp / *1"not" "(" valFilter ")" >=20 > Corrected Text > -------------- > valFilter =3D attrExp / valLogExp / *1"not" "(" valFilter ")" >=20 > valLogExp =3D attrExp SP ("and" / "or") SP attrExp >=20 > Notes > ----- > Figure 1 contains the ABNF for SCIM filters. The term "logExp" specifies "= FILTER" as an option which unintentionally allows recursion. A valFilter sho= uld only allow simple sub-attribute expressions and simple logic. Nesting o= f valuePath (e.g. attr[a eq b and attr[c eq d]]) should not be possible. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party (IESG) > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC7644 (draft-ietf-scim-api-19) > -------------------------------------- > Title : System for Cross-domain Identity Management: Protoco= l > Publication Date : September 2015 > Author(s) : P. Hunt, Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C= . Mortimore > Category : PROPOSED STANDARD > Source : System for Cross-domain Identity Management > Area : Applications and Real-Time > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Wed May 11 08:43:45 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 443D012D1CD for ; Wed, 11 May 2016 08:43:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.196 X-Spam-Level: X-Spam-Status: No, score=-5.196 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4_QrKd2-I_u8 for ; Wed, 11 May 2016 08:43:42 -0700 (PDT) Received: from tr21g10.aset.psu.edu (tr21g10.aset.psu.edu [146.186.149.132]) by ietfa.amsl.com (Postfix) with ESMTP id 5418012B008 for ; Wed, 11 May 2016 08:43:42 -0700 (PDT) Received: from ucs20.ait.psu.edu (ucs20.ait.psu.edu [128.118.73.22]) by tr21g10.aset.psu.edu (8.14.3/8.14.3) with ESMTP id u4BFhfua3395818 for ; Wed, 11 May 2016 11:43:41 -0400 Date: Wed, 11 May 2016 11:43:41 -0400 (EDT) From: Steve Moyer To: SCIM WG Message-ID: <776380145.5256917.1462981421342.JavaMail.zimbra@psu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Originating-IP: [75.102.121.133] X-Mailer: Zimbra 8.6.0_GA_1194 (ZimbraWebClient - FF48 (Linux)/8.6.0_GA_1194) Thread-Topic: RFC7644 (4670) Thread-Index: SGOzd9jx9SPJUAfTZxqzq7822bMdjw== X-Virus-Scanned: by amavisd-new Archived-At: Subject: Re: [scim] [Technical Errata Reported] RFC7644 (4670) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Steve Moyer List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2016 15:43:44 -0000 Phil, I agree with Chris ... I think his proposal allows compound expressions wit= hin the valFilter. If you're interested, we will change the ANTLR grammar = of our lexer/parser and test the results. We'd also be happy to add test c= ases that the SCIM community deems useful. The current lexer/parser tests = are *ONLY* testing grammar so they ignore whether the attribute names are v= alid from a schema perspective. We're tracking the issue with our code her= e: https://github.com/PennState/SCIMple-Identity/issues/15 We're also testing all the example filters from the protocol specification = as well as a bunch that should fail. Since the original lexer/parser was w= ritten in August/September of 2013, the square bracket syntax wasn't includ= ed in our tests. If anyone is willing to provide examples of passing and/o= r failing filters (based on the SCIM specification's intent), we'd be happy= to add them to our test suite. Please add them as comments to this issue = #15 (above) on GitHub. Thanks, Steve P.S. Our pre-errata ANTLR grammar is available at https://github.com/PennS= tate/SCIMple-Identity/blob/develop/scim-spec/scim-spec-protocol/src/main/an= tlr4/edu/psu/swe/scim/server/filter2/Filter.g4. We'll be updating the gram= mar and replacing the original SCIM filter with the results once we have it= proven out. =E2=80=9CAll the easy stuff=E2=80=99s been done=E2=80=A6. We=E2=80=99ve got= the wheel, fire, the TV clicker=E2=80=94what else do you need?=E2=80=9D - = Dean Kamen From nobody Thu May 12 12:58:42 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6977D12B039 for ; Thu, 12 May 2016 12:58:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BrsNWTNHTkIX for ; Thu, 12 May 2016 12:58:39 -0700 (PDT) Received: from mail-ig0-x232.google.com (mail-ig0-x232.google.com [IPv6:2607:f8b0:4001:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7433812B011 for ; Thu, 12 May 2016 12:58:39 -0700 (PDT) Received: by mail-ig0-x232.google.com with SMTP id lr7so62316416igb.1 for ; Thu, 12 May 2016 12:58:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=FkoMLxmbH7DInhk4UcyTJ9cI9mnbCDPAkft7pbhWF3g=; b=FIyo7d9Lf9p5/16FpD2bcsjdO856aszMA9eq1DcYUOJi7Ik/hT8z940iUYEQpptWe6 0u+ZOpmV6737XNc9IfYf76wgsxL8tA3pIK/NCkCConivvLmAplKcL1m4YCWMs4TCAqJ6 JUcAN+hjQyR1xeQQ59WO3hiWlPLmz0mQ9uhftZoHnL2k/hYwfIVkp0iQSYf4C/Uk5oVq bz9lsCd4bPpTPNZdIUVo+I4coAmrekBUPaD3EtojlY4KvjCyp5yXBdl0F731jzm4p0ZC dJ29vKq9BTB3X9AARQyV7HAjeFbzbJ9SPOBN9zQe0SdYw2uI+oJ6B4RNmuG5BVUc3hnW PNLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=FkoMLxmbH7DInhk4UcyTJ9cI9mnbCDPAkft7pbhWF3g=; b=X19WPEBvPLceO4NYsC6RLWzTTPQiR3g1BUKDfBFKb3G49adTv65ouOCB028SukJESA f059QPtqnZbHrjxkv7EUBO3h8Bp2euVUksSxESZ1rsYakf82C5JHKlh7d0CRYxPVRa2R o2ckyGTSv+r/cKUYrkbea1hyMkWuXGpaQay//UaSpAhs0wUcUQM2DFejJeY9GTB0I+rK 9UsLvDkBHKPBQJxDOmjVHKpcaCoAo5Uxq7R6Ru5TsSYrAOqYTMeJ4JCRn3AlhJcYJqPU yxab5ieV5TaGADaSM6QAPjdGLawPwQwKi6giDZuVkfxQx/LRAYuQTUHj/lVWg8KJmFrX Kz3Q== X-Gm-Message-State: AOPr4FXJEsXP9JY9vF2z4LlK85+xjosIU/vJJTN+gU6fLbhcNLir5Pwp3NC/K+JLDwtvhuGz0Dy6rKTMECQzow== MIME-Version: 1.0 X-Received: by 10.50.16.163 with SMTP id h3mr28779357igd.49.1463083118796; Thu, 12 May 2016 12:58:38 -0700 (PDT) Received: by 10.64.93.8 with HTTP; Thu, 12 May 2016 12:58:38 -0700 (PDT) Date: Thu, 12 May 2016 14:58:38 -0500 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=f46d04426cce92ef260532aa950f Archived-At: Subject: [scim] [Invalid Example] Country Attribute X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 May 2016 19:58:41 -0000 --f46d04426cce92ef260532aa950f Content-Type: text/plain; charset=UTF-8 The SCIM 1.1 and 2.0 specifications mandate the use of the ISO 3166-1 "alpha-2" code format [1]: > country The country name component. When specified, the value > MUST be in ISO 3166-1 "alpha-2" code format [ISO3166 ]; e.g., > the United States and Sweden are "US" and "SE", respectively. > > However, the User examples do not adhere to this requirement: > "addresses": [ > { > "type": "work", > "streetAddress": "100 Universal City Plaza", > "locality": "Hollywood", > "region": "CA", > "postalCode": "91608", "country": "USA", > "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA", > "primary": true > }, > { > "type": "home", > "streetAddress": "456 Hollywood Blvd", > "locality": "Hollywood", > "region": "CA", > "postalCode": "91608", "country": "USA", > "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA" > } > ] > > [1] https://tools.ietf.org/html/rfc7643#section-4.1.2 [2] https://tools.ietf.org/html/rfc7643#section-8.2 --f46d04426cce92ef260532aa950f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
The SCIM 1.1 and 2.0 specifications mandate the use of the= ISO 3166-1 "alpha-2" code format [1]:
country  The country name compon=
ent.  When specified, the value
         MUST be in ISO 3166-1 "alpha-2" code format [ISO3166]; e.g.,
         the United States and Sweden are "US" and "SE"=
, respectively.

However, the User examples do not adh= ere to this requirement:
  "addresses": [
    {
      "type": "work",
      "streetAddress": "100 Universal City Plaza",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA&quo=
t;,
      "formatted": "100 Universal City Plaza\nHollywood, CA =
91608 USA",
      "primary": true
    },
    {
      "type": "home",
      "streetAddress": "456 Hollywood Blvd",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA&quo=
t;,
      "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 =
USA"
    }
  ]
--f46d04426cce92ef260532aa950f-- From nobody Thu May 12 13:07:52 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F6C212B053 for ; Thu, 12 May 2016 13:07:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.216 X-Spam-Level: X-Spam-Status: No, score=-5.216 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1MviYXAWhvvw for ; Thu, 12 May 2016 13:07:49 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79EE712B011 for ; Thu, 12 May 2016 13:07:49 -0700 (PDT) Received: from userv0021.oracle.com (userv0021.oracle.com [156.151.31.71]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id u4CK7lkW013122 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 12 May 2016 20:07:47 GMT Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by userv0021.oracle.com (8.13.8/8.13.8) with ESMTP id u4CK7k9a014594 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 12 May 2016 20:07:47 GMT Received: from abhmp0017.oracle.com (abhmp0017.oracle.com [141.146.116.23]) by userv0121.oracle.com (8.13.8/8.13.8) with ESMTP id u4CK7kxK026739; Thu, 12 May 2016 20:07:46 GMT Received: from [10.0.1.21] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 12 May 2016 13:07:45 -0700 Content-Type: multipart/alternative; boundary="Apple-Mail=_1B39F3E2-248F-426C-9EFC-DE31B46F7CA0" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Phil Hunt In-Reply-To: Date: Thu, 12 May 2016 13:07:43 -0700 Message-Id: <5B2C7EDB-80F9-4377-AC88-DF200BDE9DD6@oracle.com> References: To: Shelley X-Mailer: Apple Mail (2.3124) X-Source-IP: userv0021.oracle.com [156.151.31.71] Archived-At: Cc: "scim@ietf.org" Subject: Re: [scim] [Invalid Example] Country Attribute X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 May 2016 20:07:51 -0000 --Apple-Mail=_1B39F3E2-248F-426C-9EFC-DE31B46F7CA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Thanks Shelley. Good spotting. Phil @independentid www.independentid.com = phil.hunt@oracle.com = > On May 12, 2016, at 12:58 PM, Shelley wrote: >=20 > The SCIM 1.1 and 2.0 specifications mandate the use of the ISO 3166-1 = "alpha-2" code format [1]: > country The country name component. When specified, the value > MUST be in ISO 3166-1 "alpha-2" code format [ISO3166 = ]; e.g., > the United States and Sweden are "US" and "SE", respectively. >=20 > However, the User examples do not adhere to this requirement: > "addresses": [ > { > "type": "work", > "streetAddress": "100 Universal City Plaza", > "locality": "Hollywood", > "region": "CA", > "postalCode": "91608", > "country": "USA", > "formatted": "100 Universal City Plaza\nHollywood, CA 91608 = USA", > "primary": true > }, > { > "type": "home", > "streetAddress": "456 Hollywood Blvd", > "locality": "Hollywood", > "region": "CA", > "postalCode": "91608", > "country": "USA", > "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA" > } > ] >=20 > [1] https://tools.ietf.org/html/rfc7643#section-4.1.2 = > [2] https://tools.ietf.org/html/rfc7643#section-8.2 = > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_1B39F3E2-248F-426C-9EFC-DE31B46F7CA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Thanks Shelley.  Good spotting.




On May 12, 2016, at 12:58 PM, Shelley <randomshelley@gmail.com> wrote:

The SCIM 1.1 and 2.0 specifications mandate the use of the = ISO 3166-1 "alpha-2" code format [1]:
country  The country name component.  When specified, the =
value
         MUST be in ISO 3166-1 "alpha-2" code format [ISO3166];=
 e.g.,
         the United States and Sweden are "US" and "SE", =
respectively.

However, the User = examples do not adhere to this requirement:
 =
 "addresses": [
    {
      "type": "work",
      "streetAddress": "100 Universal City Plaza",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": =
"USA",
      "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA",
      "primary": true
    },
    {
      "type": "home",
      "streetAddress": "456 Hollywood Blvd",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": =
"USA",
      "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA"
    }
  ]

[1] https://tools.ietf.org/html/rfc7643#section-4.1.2
[2] https://tools.ietf.org/html/rfc7643#section-8.2
_______________________________________________
scim = mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

= --Apple-Mail=_1B39F3E2-248F-426C-9EFC-DE31B46F7CA0-- From nobody Thu May 12 16:55:41 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1317A12D0CD for ; Thu, 12 May 2016 16:55:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.718 X-Spam-Level: X-Spam-Status: No, score=-2.718 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=kJNMKpTm; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=YT2vhAPW Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GEXAZOwfWisH for ; Thu, 12 May 2016 16:55:38 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFE4112D0A3 for ; Thu, 12 May 2016 16:55:37 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 681A220C83 for ; Thu, 12 May 2016 19:55:37 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Thu, 12 May 2016 19:55:37 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=mBsWgf/vwC8TjI3qAX3ytvBcXic=; b=kJNMKp Tm/IDW7HJVUUZTamYjCY3u3yJE5lTzkF3AZN6srWf+GtjZKQkOcMsatWUni6ilRq qLeOx/cxZwuU7DfhkSrSDR5qGgvtB0tiS5nw1do8P7ZSu7GuUdrO4MWp59MTVwd2 SFQ7BhqVCaY5hza43RR0xRTo19tXe4oa92NcI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=mBsWgf/vwC8TjI3 qAX3ytvBcXic=; b=YT2vhAPWqnpapiLU/6KJQvk8Tobi+7HhHVO4rjRPQjJTyg0 m4L69na1q6tr49pJP980uep5LwcK2Exrm1z+Fyh7Nv2KkT7qqN47Wj+w09aoiWzG G5Nf2nauncoX0cQnyYlcfMjsnGZD92Zliwrwgn8Y/0cxArbVLGlq+AisCIZo= X-Sasl-enc: YUcu9D3LFcuNMebUl9jnH/W1ShkKNiw3nkpRAiVNNz4d 1463097337 Received: from [10.172.125.34] (unknown [209.117.45.10]) by mail.messagingengine.com (Postfix) with ESMTPA id 1EEB7C00020; Thu, 12 May 2016 19:55:37 -0400 (EDT) Content-Type: multipart/alternative; boundary=Apple-Mail-09392532-079E-4323-8446-18C9B484DB8C Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPad Mail (13E238) In-Reply-To: <5B2C7EDB-80F9-4377-AC88-DF200BDE9DD6@oracle.com> Date: Thu, 12 May 2016 20:03:40 -0400 Content-Transfer-Encoding: 7bit Message-Id: <11A371DD-87A8-4883-BC97-6A1A99ABC668@fastmail.fm> References: <5B2C7EDB-80F9-4377-AC88-DF200BDE9DD6@oracle.com> To: Phil Hunt Archived-At: Cc: "scim@ietf.org" , Shelley Subject: Re: [scim] [Invalid Example] Country Attribute X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 May 2016 23:55:40 -0000 --Apple-Mail-09392532-079E-4323-8446-18C9B484DB8C Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi, > On 12 May 2016, at 16:07, Phil Hunt wrote: >=20 > Thanks Shelley. Good spotting. Can this be submitted as an erratum? >=20 > Phil >=20 > @independentid > www.independentid.com > phil.hunt@oracle.com >=20 >=20 >=20 >=20 >=20 >>> On May 12, 2016, at 12:58 PM, Shelley wrote: >>>=20 >>> The SCIM 1.1 and 2.0 specifications mandate the use of the ISO 3166-1 "a= lpha-2" code format [1]: >>> country The country name component. When specified, the value >>> MUST be in ISO 3166-1 "alpha-2" code format [ISO3166]; e.g., >>> the United States and Sweden are "US" and "SE", respectively. >>=20 >> However, the User examples do not adhere to this requirement: >>> "addresses": [ >>> { >>> "type": "work", >>> "streetAddress": "100 Universal City Plaza", >>> "locality": "Hollywood", >>> "region": "CA", >>> "postalCode": "91608", >>> "country": "USA", >>> "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA", >>> "primary": true >>> }, >>> { >>> "type": "home", >>> "streetAddress": "456 Hollywood Blvd", >>> "locality": "Hollywood", >>> "region": "CA", >>> "postalCode": "91608", >>> "country": "USA", >>> "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA" >>> } >>> ] >>=20 >> [1] https://tools.ietf.org/html/rfc7643#section-4.1.2 >> [2] https://tools.ietf.org/html/rfc7643#section-8.2 >> _______________________________________________ >> scim mailing list >> scim@ietf.org >> https://www.ietf.org/mailman/listinfo/scim >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail-09392532-079E-4323-8446-18C9B484DB8C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Hi,

On 12 May 2016, at 1= 6:07, Phil Hunt <phil.hunt@oracle= .com> wrote:

Thanks Shelle= y.  Good spotting.

Can this be submitt= ed as an erratum?

<= div class=3D"">Phil

@independentid
www.independentid.com

<= br class=3D"Apple-interchange-newline">



On M= ay 12, 2016, at 12:58 PM, Shelley <randomshelley@gmail.com> wrote:

The SCIM= 1.1 and 2.0 specifications mandate the use of the ISO 3166-1 "alpha-2" code= format [1]:
= 
country  The country name component.  When specified, the va=
lue
         MUST be in ISO 3166-1 "alpha-2" code format [ISO3166]; e.g.,
         the United States and Sweden are "US" and "SE", respectively.
=

However, the User examples do not adhere to this= requirement:
  "addresses": [
    {
      "type": "work",
      "streetAddress": "100 Universal City Plaza",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA",=

      "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA",
      "primary": true
    },
    {
      "type": "home",
      "streetAddress": "456 Hollywood Blvd",
      "locality": "Hollywood",
      "region": "CA",
      "postalCode": "91608",
      "country": "USA",=

      "formatted": "456 Hollywood Blvd\nHollywood, CA 91608 USA"
    }
  ]

[1] https://tools.ietf.org= /html/rfc7643#section-4.1.2
[2] https://tools.ietf.org/html/rfc= 7643#section-8.2
_______________________________________________
scim mailing l= ist
scim@ietf.org<= /a>
htt= ps://www.ietf.org/mailman/listinfo/scim

_______________________________________________
scim mailing list
scim@ie= tf.org
https://www.ietf.org/mailman/listinfo/scim
= --Apple-Mail-09392532-079E-4323-8446-18C9B484DB8C-- From nobody Wed May 18 09:14:24 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01C1312D1A8 for ; Wed, 18 May 2016 09:14:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=salesforce.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CMeVmf3Xttbc for ; Wed, 18 May 2016 09:14:22 -0700 (PDT) Received: from mail-ig0-x22d.google.com (mail-ig0-x22d.google.com [IPv6:2607:f8b0:4001:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D02C12D16D for ; Wed, 18 May 2016 09:14:22 -0700 (PDT) Received: by mail-ig0-x22d.google.com with SMTP id u5so14410425igk.1 for ; Wed, 18 May 2016 09:14:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salesforce.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=xtDscvOVCFHc52EFDax3NCdYor+62LX7rB7RI3ziMyM=; b=aebgJtMhA31tkqThgTwA6OVNZk5KBfTvMvZIdaC53qHaw3BsCKFvMAzrTLhyqZV+2w TL5AduRaZUZ+4Gegx+IB2CP2GEFNdTnZ60jCqbm/BV18K23psIVNU+hPKzVOn3WQnUrQ ZsCP4t5ehsYmvify+K40Z8rA605p7zHVWQNd4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=xtDscvOVCFHc52EFDax3NCdYor+62LX7rB7RI3ziMyM=; b=ZoliA+Vz5cABlcXt3M6TisrQmIs09tZwPSBvHhUJFMbt4RY+M98e+dvwfvbO0QiKU3 ZjkLDfys6fkygMldIjMIuIjmU8pcnGpJVSPcmnxOIdCFaiIm7WXtOQaDuiMxmAiFqxZ8 RRv/M22ejHrnFHLr3pDqkaTtYmNvgTTgZLEYW7npiMarIrptERcN50hn068jwmfYIe8U lH7jn0mbllaKmh/qzRtrgml0f00GyKFJWMB3tLWm6uzF64zjaS5OJGR2R4Sbpzl5De8C 0M4zp1eavRt6miR9tvmPUhqfu/dzDbYU15V1gTODOhVlU877wKQpj0vqRI0O1+xyVVjm jfWg== X-Gm-Message-State: AOPr4FWLt7IYWrDDvAU3N0ckC3BiuiZriT0rT/sr6VxDKr6Xv+sp/oRKIJH1VM//DvkyOkkWl1gWO9B77HPccbd1 X-Received: by 10.50.104.165 with SMTP id gf5mr4321217igb.79.1463588061803; Wed, 18 May 2016 09:14:21 -0700 (PDT) MIME-Version: 1.0 Received: by 10.36.36.21 with HTTP; Wed, 18 May 2016 09:14:02 -0700 (PDT) From: Ian Glazer Date: Wed, 18 May 2016 12:14:02 -0400 Message-ID: To: "scim@ietf.org WG" Content-Type: multipart/alternative; boundary=e89a8f23435585be2d05332026bd Archived-At: Subject: [scim] Did the SP config docs vanish? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 May 2016 16:14:24 -0000 --e89a8f23435585be2d05332026bd Content-Type: text/plain; charset=UTF-8 Gang - Anyone else *not* seeing the SP config documents in the google drive folder? i -- Ian Glazer Senior Director, Identity +1 202 255 3166 @iglazer --e89a8f23435585be2d05332026bd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Gang -

Anyone else *not* seeing the SP = config documents in the google drive folder?

i

--
Ian Glazer
Senior Director, Identity
= +1 202 255 3166
--e89a8f23435585be2d05332026bd-- From nobody Wed May 18 09:30:41 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D24B912D1AA for ; Wed, 18 May 2016 09:30:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sailpoint.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6JaySkUyPzyB for ; Wed, 18 May 2016 09:30:38 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0713.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::713]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E1C012D19F for ; Wed, 18 May 2016 09:30:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sailpoint.onmicrosoft.com; s=selector1-sailpoint-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ah1ZaleaPILsCBeII7rzU9Pq2FxajcG40Fzfo+INEGw=; b=TgelDTuKWNTAUPtqBUzjkNyZiD+Kvamn5slyy3zJm2+PSoFrMKB9ZxLBUusIjCo7r3odT3PNOuBuJK4Z57KjoGgxDpjSMhQtlBPfR1RmE1qiSp6Ad1nb6R9xCSw3nDszj+1XlWSJtTpiNQQhrpBbe5ShIsUkK+8uu5dt0YvngWU= Received: from CO2PR04MB2359.namprd04.prod.outlook.com (10.166.94.153) by CO2PR04MB2357.namprd04.prod.outlook.com (10.166.94.151) with Microsoft SMTP Server (TLS) id 15.1.497.12; Wed, 18 May 2016 16:30:20 +0000 Received: from CO2PR04MB2359.namprd04.prod.outlook.com ([10.166.94.153]) by CO2PR04MB2359.namprd04.prod.outlook.com ([10.166.94.153]) with mapi id 15.01.0497.019; Wed, 18 May 2016 16:30:20 +0000 From: Kelly Grizzle To: Ian Glazer , "scim@ietf.org WG" Thread-Topic: [scim] Did the SP config docs vanish? Thread-Index: AQHRsSBdBj3hwK9bQE6sCpgEbLd8Yp++4tTw Date: Wed, 18 May 2016 16:30:20 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 0095F3D100C13C0095F51E authentication-results: salesforce.com; dkim=none (message not signed) header.d=none;salesforce.com; dmarc=none action=none header.from=sailpoint.com; x-originating-ip: [70.114.154.180] x-ms-office365-filtering-correlation-id: f328df97-f8a6-4ff5-0866-08d37f39b45f x-microsoft-exchange-diagnostics: 1; CO2PR04MB2357; 5:mWF8cJ6KgUj/wH2dFl8LnYTa/s2YxAWH5vKH4grknVlpYQONOYnG7GMcBY7+HcxCMguaaIU79p4DrYfIgu3f9UpBzKTbebkkznaRr7ItWOQWIgg6xt6/aYmqXh4Ekk1qSZXNq9hprV0wK+OQTlUdvg==; 24:Y/zR1kQf1FUKTOtXrZYJsIYUDNlPmpgL17scd8slkna1uZB3ujVcwERfM0EuU/XmLopH4zk7oXAkUEI1nYncEO4KpQNGxe/WtuO43oSsJv8=; 7:qMTHNtLABGUPfsPJCBvJ1Yevl4Llmq0MycywV8h7y5ESOTb32IQm3hh+xmM6kU1Pfd/Poe6ZJV5rZJ3cOFUehmh1xwS8P0y+Yc+qW7jYWDkXddkLALWwCSTUR95CbaRasMYAJPkIJ3YVXX9xIsrylV/bqwk9UArJJIG92iYFu1lH3aOngDm1FCetoGh2dCeB x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CO2PR04MB2357; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001); SRVR:CO2PR04MB2357; BCL:0; PCL:0; RULEID:; SRVR:CO2PR04MB2357; x-forefront-prvs: 0946DC87A1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(790700001)(5008740100001)(6116002)(3280700002)(5004730100002)(1220700001)(189998001)(102836003)(122556002)(2906002)(11100500001)(74316001)(87936001)(106116001)(19609705001)(5002640100001)(86362001)(586003)(107886002)(19300405004)(54356999)(76176999)(99286002)(3660700001)(50986999)(5001770100001)(8676002)(81166006)(8936002)(9686002)(575784001)(19625215002)(77096005)(5003600100002)(2950100001)(16236675004)(2900100001)(10400500002)(15975445007)(92566002)(19580395003)(33656002)(19617315012)(66066001)(76576001)(19580405001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR04MB2357; H:CO2PR04MB2359.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CO2PR04MB23599A852C0AC574C9FC8EB9E2490CO2PR04MB2359namp_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2016 16:30:20.2862 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR04MB2357 Archived-At: Subject: Re: [scim] Did the SP config docs vanish? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 May 2016 16:30:41 -0000 --_000_CO2PR04MB23599A852C0AC574C9FC8EB9E2490CO2PR04MB2359namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SeKAmW0gc3RpbGwgc2VlaW5nIHRoZW0gaGVyZSAtIGh0dHBzOi8vZHJpdmUuZ29vZ2xlLmNvbS9k cml2ZS9mb2xkZXJzLzBCOVl4aEhLVTBZaG9jVEJ0TFd4eFEyOUZZMUUuDQoNCkZyb206IHNjaW0g W21haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBJYW4gR2xhemVyDQpT ZW50OiBXZWRuZXNkYXksIE1heSAxOCwgMjAxNiAxMToxNCBBTQ0KVG86IHNjaW1AaWV0Zi5vcmcg V0cgPHNjaW1AaWV0Zi5vcmc+DQpTdWJqZWN0OiBbc2NpbV0gRGlkIHRoZSBTUCBjb25maWcgZG9j cyB2YW5pc2g/DQoNCkdhbmcgLQ0KDQpBbnlvbmUgZWxzZSAqbm90KiBzZWVpbmcgdGhlIFNQIGNv bmZpZyBkb2N1bWVudHMgaW4gdGhlIGdvb2dsZSBkcml2ZSBmb2xkZXI/DQoNCmkNCg0KLS0NCklh biBHbGF6ZXINClNlbmlvciBEaXJlY3RvciwgSWRlbnRpdHkNCisxIDIwMiAyNTUgMzE2Ng0KQGln bGF6ZXI8aHR0cHM6Ly90d2l0dGVyLmNvbS9pZ2xhemVyPg0K --_000_CO2PR04MB23599A852C0AC574C9FC8EB9E2490CO2PR04MB2359namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRl ZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8 bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48 IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGlu az0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPknigJltIHN0aWxsIHNlZWluZyB0aGVtIGhlcmUgLSBodHRw czovL2RyaXZlLmdvb2dsZS5jb20vZHJpdmUvZm9sZGVycy8wQjlZeGhIS1UwWWhvY1RCdExXeHhR MjlGWTFFLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij4gc2NpbSBbbWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8 L2I+SWFuIEdsYXplcjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE1heSAxOCwgMjAxNiAx MToxNCBBTTxicj4NCjxiPlRvOjwvYj4gc2NpbUBpZXRmLm9yZyBXRyAmbHQ7c2NpbUBpZXRmLm9y ZyZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW3NjaW1dIERpZCB0aGUgU1AgY29uZmlnIGRvY3Mg dmFuaXNoPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkdhbmcgLTxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QW55b25lIGVsc2UgKm5v dCogc2VlaW5nIHRoZSBTUCBjb25maWcgZG9jdW1lbnRzIGluIHRoZSBnb29nbGUgZHJpdmUgZm9s ZGVyPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5pPGJyIGNsZWFyPSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPi0tIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SWFuIEdsYXplcjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+U2VuaW9yIERpcmVjdG9yLCBJZGVudGl0eTxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+JiM0MzsxIDIwMiAyNTUgMzE2Njxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgaHJl Zj0iaHR0cHM6Ly90d2l0dGVyLmNvbS9pZ2xhemVyIiB0YXJnZXQ9Il9ibGFuayI+QGlnbGF6ZXI8 L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_CO2PR04MB23599A852C0AC574C9FC8EB9E2490CO2PR04MB2359namp_-- From nobody Wed May 18 09:32:48 2016 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB20D12D1AA for ; Wed, 18 May 2016 09:32:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=salesforce.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ya29ZlepV5VG for ; Wed, 18 May 2016 09:32:46 -0700 (PDT) Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4540C12D5CC for ; Wed, 18 May 2016 09:32:27 -0700 (PDT) Received: by mail-io0-x231.google.com with SMTP id i75so72293937ioa.3 for ; Wed, 18 May 2016 09:32:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salesforce.com; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=XqlcdDdyEW/JiHKFq3XYlaUUWapZbhixwyaeMO536k4=; b=K3tRtFL9nVdn7CtDMRX7l+XYhWd2lCmOvYOZOrwuykKjVSdPwwdYBb7IdU5G5G4njH y8bA7DSnSeAyfq6qpevaQo5OEuwcAYDGr8lszbfMugxxOyknviayOakWt2h53IP5zDYl VAkTW3UWaTc76OxS3BOPKoPDkhp1qrimPUZeg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=XqlcdDdyEW/JiHKFq3XYlaUUWapZbhixwyaeMO536k4=; b=dHcVsTuH4G3cEHaisfey37XAbOSM4QUfs2YAKAgCUqq5ARbLWs0SlSd5D8vvwvX9Id mmTpqNqINCxzWBxLMqg95nONgodyo0drycJHdwYVWNdW1Zv8owi3tgBNM9J7nAf9YT3H V7xaRKFhxVlcyzRYuhJOdbyINHGO0FnYBC8HV7to2F9gWi4jZM8ZkrTvgoG70DTOP1J/ wfqBMq5gyLYpGObTGXfTAQGHvGhSVXCN1vdVBnISbb//rrclxcEp6XlC+wZ463KkPYGW xcG+YlCvozBL6HxsPix7N/xslaL9G28vC/G1wd1tqLtNta+OmJBO5VR1c/czbNQmTSWV o52Q== X-Gm-Message-State: AOPr4FVHIC0Mi5bfKae909rMMzpMJL47aofRs2liQQk0VqsNQ2xZH6lCqZWk/IO/bIC+Q/4/0LxLVVgcyJMNFPdb X-Received: by 10.107.187.196 with SMTP id l187mr5933733iof.72.1463589146573; Wed, 18 May 2016 09:32:26 -0700 (PDT) MIME-Version: 1.0 Received: by 10.36.36.21 with HTTP; Wed, 18 May 2016 09:32:07 -0700 (PDT) In-Reply-To: References: From: Ian Glazer Date: Wed, 18 May 2016 12:32:07 -0400 Message-ID: To: Kelly Grizzle Content-Type: multipart/alternative; boundary=94eb2c0777342e01820533206762 Archived-At: Cc: "scim@ietf.org WG" Subject: Re: [scim] Did the SP config docs vanish? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 May 2016 16:32:48 -0000 --94eb2c0777342e01820533206762 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Yeah looks like PEBCAC But - I did update our SP doc to include to correct v2 endpoints (and not the old v1 endpoints). Apologies to everyone who hit the old ones and were confused On Wed, May 18, 2016 at 12:30 PM, Kelly Grizzle wrote: > I=E2=80=99m still seeing them here - > https://drive.google.com/drive/folders/0B9YxhHKU0YhocTBtLWxxQ29FY1E. > > > > *From:* scim [mailto:scim-bounces@ietf.org] *On Behalf Of *Ian Glazer > *Sent:* Wednesday, May 18, 2016 11:14 AM > *To:* scim@ietf.org WG > *Subject:* [scim] Did the SP config docs vanish? > > > > Gang - > > > > Anyone else *not* seeing the SP config documents in the google drive > folder? > > > > i > > > > -- > > Ian Glazer > > Senior Director, Identity > > +1 202 255 3166 > > @iglazer > --=20 Ian Glazer Senior Director, Identity +1 202 255 3166 @iglazer --94eb2c0777342e01820533206762 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Yeah looks like PEBCAC

But - I did upda= te our SP doc to include to correct v2 endpoints (and not the old v1 endpoi= nts). Apologies to everyone who hit the old ones and were confused

On Wed, May 18= , 2016 at 12:30 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

I=E2=80=99m still seeing them here - https://drive.google.com/drive/folders/0B9YxhHKU0YhocTBtLWxxQ29FY1= E.

=C2=A0

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Ian Glazer
Sent: Wednesday, May 18, 2016 11:14 AM
To: scim@ietf.org= WG <scim@ietf.or= g>
Subject: [scim] Did the SP config docs vanish?<= /p>

=C2=A0

Gang -

=C2=A0

Anyone else *not* seeing the SP config documents in = the google drive folder?

=C2=A0

i

=C2=A0

--

Ian Glazer

Senior Director, Identity




--
Ian Glazer
Senior = Director, Identity
+1 202 255 3166
--94eb2c0777342e01820533206762--