SCIM search returns active even if the user status in inactive ( active=true)

By: SENTHILKUMAR DHANAPAL user 02 Apr 2018 at 9:42 p.m. CDT

4 Responses
SENTHILKUMAR DHANAPAL gravatar
SCIM search returns active even if the user status in inactive ( active=true). it should return active false when user is inactive. gluuStatus attribute configured with admin/user for both view and edit type. it is also enabled for SCIMAttribute =true in attribute configuration. { "schemas":["urn:ietf:params:scim:api:messages:2.0:SearchRequest"], "filter":"userName eq \"senthil@gmail.com\" and active eq \"true\"", "count":10, "startIndex":1 }
Rhel 7.2
closed

Answers

By Thomas Gasmyr Mougang staff 03 Apr 2018 at 12:39 a.m. CDT

Copy
Thomas Gasmyr Mougang gravatar
Hi **SENTHILKUMAR**, The SCIM api at gluu has evolved a lot since Gluu v3.0.1 We recommend that you update to Gluu 3.1.2 which has a more mature and feature rich SCIM API. You can read about [here](https://gluu.org/docs/ce/user-management/scim2/). Thanks, Gasmyr

By SENTHILKUMAR DHANAPAL user 03 Apr 2018 at 8:25 a.m. CDT

Copy
SENTHILKUMAR DHANAPAL gravatar
do we have alternate option or fix without doing gluu upgrade. I am afraid I can do that. I need a resolve this 3.0.1 version

By Thomas Gasmyr Mougang staff 03 Apr 2018 at 3:11 p.m. CDT

Copy
Thomas Gasmyr Mougang gravatar
Hi, For scim, Gluu use **oxtrustactive** LDAP attribute to map scim **active** attribute. There might be problems when **gluuStatus** and **oxtrustactive** attributes are synced in your version. Check your LDAP data and determine if your search is coherent with regard to **oxtrustactive** You can use an LDAP Explorer like Jxplorer to check that. Thanks, Gasmyr

By SENTHILKUMAR DHANAPAL user 04 Apr 2018 at 9:39 a.m. CDT

Copy
SENTHILKUMAR DHANAPAL gravatar
Thanks. I updated the query as below and it worked, "filter":"userName eq \"senthil@gmail.com\" and gluuStatus eq \"active\"", Thanks, Senthil.

Post an answer