Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-26 Thread Gayan Gunawardana
On Fri, Mar 24, 2017 at 3:25 PM, Sagara Gunathunga wrote: > > > On Wed, Mar 8, 2017 at 12:51 AM, Johann Nallathamby > wrote: > >> >> >> On Tue, Mar 7, 2017 at 9:43 AM, Ishara Karunarathna >> wrote: >> >>> Hi, >>> >>> In SCIM domain is used to represent the whole administrative >>> provisioning

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-24 Thread Sagara Gunathunga
On Wed, Mar 8, 2017 at 12:51 AM, Johann Nallathamby wrote: > > > On Tue, Mar 7, 2017 at 9:43 AM, Ishara Karunarathna > wrote: > >> Hi, >> >> In SCIM domain is used to represent the whole administrative provisioning >> system . So I don't think domain discuss in the spec directly map to the >> do

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-07 Thread Johann Nallathamby
On Tue, Mar 7, 2017 at 9:43 AM, Ishara Karunarathna wrote: > Hi, > > In SCIM domain is used to represent the whole administrative provisioning > system . So I don't think domain discuss in the spec directly map to the > domain concept we have. > > In the spec when defining the tenants they have t

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-07 Thread Ishara Karunarathna
On Tue, Mar 7, 2017 at 12:49 PM, Gayan Gunawardana wrote: > > > On Tue, Mar 7, 2017 at 9:43 AM, Ishara Karunarathna > wrote: > >> Hi, >> >> In SCIM domain is used to represent the whole administrative provisioning >> system . So I don't think domain discuss in the spec directly map to the >> dom

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-06 Thread Gayan Gunawardana
On Tue, Mar 7, 2017 at 9:43 AM, Ishara Karunarathna wrote: > Hi, > > In SCIM domain is used to represent the whole administrative provisioning > system . So I don't think domain discuss in the spec directly map to the > domain concept we have. > We are not discussing here provisioning system (dom

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-06 Thread Ishara Karunarathna
Hi, In SCIM domain is used to represent the whole administrative provisioning system . So I don't think domain discuss in the spec directly map to the domain concept we have. In the spec when defining the tenants they have the option to use tenant domain as a path parameter or sub domain. A URL

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-06 Thread Vindula Jayawardana
Hi, According to SCIM protocol specification[1], SCIM service providers may support additional query parameters apart from the standard set of query parameters in querying resources. Hence +1 for what Gayan has proposed here. I also agree with what Omindu has proposed. I think we could even add t

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-03 Thread Omindu Rathnaweera
Hi Gayan, Does the protocol permits introducing custom parameters as domain? If so +1 for using a param. Else, we can include the domain name as a part of the username (IINM we support this in C4 as well), so searching only in a particular domain will look like below. /scim/v2/Users?filter=userN

Re: [Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-02 Thread Chamila Wijayarathna
Hi Gayan, When it comes to SCIM, is there a attribute called 'domain' already? In C5, is there something like fully qualified name (i.e. domain/username) as in C4, or this domain thing in C5 is completely different thing? If we are to implement one of few of the queries you have suggested above,

[Architecture] [IS-6.0.0] SCIM list resources with multiple user stores

2017-03-02 Thread Gayan Gunawardana
Hi All, How are we going to support SCIM list all users and list all groups operations when we have multiple user store domains. In C4 we could iterate through all user stores and fetch results but in C5 we highly discourage such a functionality due to performance impact. Basically client need to