Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-09-22 Thread Johann Nallathamby
On Fri, Sep 1, 2017 at 10:36 PM, Johann Nallathamby wrote: > In that case can we set a threadlocal variable in order to identify the > SCIM version? Based on that the correct listener will execute and the other > will not. Since SCIM1.1 listener will check for it's related

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-09-01 Thread Johann Nallathamby
In that case can we set a threadlocal variable in order to identify the SCIM version? Based on that the correct listener will execute and the other will not. Since SCIM1.1 listener will check for it's related threadlocal and SCIM2.0 listener it's related threadlocal there is not coupling between

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-31 Thread Sathya Bandara
On Thu, Aug 31, 2017 at 2:18 PM, Johann Nallathamby wrote: > Hi Sathya, > > On Thu, Aug 31, 2017 at 12:29 PM, Sathya Bandara wrote: > >> Hi Johann, >> >> IMO having two separate LDAP attributes for the same claims in both SCIM1 >> and SCIM2 would be redundant

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-31 Thread Johann Nallathamby
Hi Sathya, On Thu, Aug 31, 2017 at 12:29 PM, Sathya Bandara wrote: > Hi Johann, > > IMO having two separate LDAP attributes for the same claims in both SCIM1 > and SCIM2 would be redundant and cause problems in maintaining user > attributes. > True. I didn't say this is the

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-31 Thread Chamila Wijayarathna
We should not have two different IDs if there is no difference in the format (eg: length) for ID's in spec IMO On Thu, Aug 31, 2017 at 4:59 PM, Sathya Bandara wrote: > Hi Johann, > > IMO having two separate LDAP attributes for the same claims in both SCIM1 > and SCIM2 would be

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-31 Thread Sathya Bandara
Hi Johann, IMO having two separate LDAP attributes for the same claims in both SCIM1 and SCIM2 would be redundant and cause problems in maintaining user attributes. If we need to have both listeners enabled at the time I would suggest to use a common util method to generate IDs and do the

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-31 Thread Johann Nallathamby
Will it work if we have two separate attributes for the problematic attributes like SCIM ID? If that works I guess that is one solution. Or we need to have one listener for both SCIM 1 and SCIM2. But don't think that's a good solution. Introduces direct coupling between two implementations.

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Ishara Karunarathna
HI, On Thu, Aug 31, 2017 at 7:26 AM, Sagara Gunathunga wrote: > > > On Thu, Aug 31, 2017 at 12:12 AM, Vindula Jayawardana < > vindula...@cse.mrt.ac.lk> wrote: > >> Hi, >> >> IMO, should be able to enable both at the same time. What is the issue >> you faced when enabling both?

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Sagara Gunathunga
On Thu, Aug 31, 2017 at 12:12 AM, Vindula Jayawardana < vindula...@cse.mrt.ac.lk> wrote: > Hi, > > IMO, should be able to enable both at the same time. What is the issue you > faced when enabling both? > > Achieving interoperability between 1.1 consumers and 2.0 providers can > have two practical

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Vindula Jayawardana
Hi, IMO, should be able to enable both at the same time. What is the issue you faced when enabling both? Achieving interoperability between 1.1 consumers and 2.0 providers can have two practical approaches. One approach is to have a multi-protocol ability in the SCIM service provider’s end. This

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Sathya Bandara
Hi Thilina, If we enable both SCIM1 and SCIM2 listeners at the same time two different SCIM IDs will be generated for the same user when adding a new user through SCIM. Also both SCIM1 and SCIM2 claims are mapped to the same LDAP user attributes. Even though both listeners get triggered only the

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Chamila Wijayarathna
It should be possible to enable both at same time IMO On Wed, Aug 30, 2017 at 11:00 PM, Farasath Ahamed wrote: > > > On Wednesday, August 30, 2017, Thilina Madumal > wrote: > >> >> Hi all, >> >> While I was trying to fix IDENTITY-6315 >>

Re: [Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Farasath Ahamed
On Wednesday, August 30, 2017, Thilina Madumal wrote: > > Hi all, > > While I was trying to fix IDENTITY-6315 > I got to know that we can't > enable both SCIM1 and SCIM2 at the same time in WSO2 Identity Server. > Is it because of

[Dev] [IS] [SCIM] Why Can't We Enable Both SCIM1 and SCIM2 at the Same Time?

2017-08-30 Thread Thilina Madumal
Hi all, While I was trying to fix IDENTITY-6315 I got to know that we can't enable both SCIM1 and SCIM2 at the same time in WSO2 Identity Server. Is it because of this specific issue or is there any other reasons? Thanks & Regards, Thilina. --