Hi, Share more information. The information provide is not enough to assist you.

I am trying to search user using SCIMClient (UMA Mode). domain : 'https://tenant1dev.dev.trizetto.com/identity/restv1' umaAatClientId : '@!25E1.2B9A.65EC.32DC!0001!4A8E.A672!0008!DB2A.B139' umaAatClientJksPassword : 'secret' ClassPathResource classPathresource = new ClassPathResource("classpath:scim-rp.jks"); public List<Resource> searchUser(IDPSearchUser idpSearchUser) { ScimClient client = ScimClientFactory.getClient(appConfig.getDomain(), null, appConfig.getUmaAatClientId(), classPathresource.getPath(), appConfig.getUmaAatClientJksPd(), appConfig.getUmaAatClientId()); BaseClientResponse<ListResponse> response = null; try { response = client.searchUsers(idpSearchUser.getFilter(), 1, 1, "", "", null); } catch (IOException e) { // TODO Auto-generated catch block e.printStackTrace(); } return response.getEntity().getResources(); } Log : at org.glassfish.jersey.server.ServerRuntime$2.run(ServerRuntime.java:326) ... 52 common frames omitted Caused by: javax.ws.rs.ProcessingException: Unable to find a MessageBodyReader of content-type */* and type class org.gluu.oxtrust.model.scim2.ListResponse at org.jboss.resteasy.core.interception.ClientReaderInterceptorContext.throwReaderNotFound(ClientReaderInterceptorContext.java:39) at org.jboss.resteasy.core.interception.AbstractReaderInterceptorContext.getReader(AbstractReaderInterceptorContext.java:73) at org.jboss.resteasy.core.interception.AbstractReaderInterceptorContext.proceed(AbstractReaderInterceptorContext.java:50) at org.jboss.resteasy.plugins.interceptors.encoding.GZIPDecodingInterceptor.aroundReadFrom(GZIPDecodingInterceptor.java:59) at org.jboss.resteasy.core.interception.AbstractReaderInterceptorContext.proceed(AbstractReaderInterceptorContext.java:53) at org.jboss.resteasy.client.core.BaseClientResponse.readFrom(BaseClientResponse.java:440)

Provide `/opt/gluu/jetty/identity/logs/oxtrust.log` and `/opt/gluu/jetty/oxauth/logs/oxauth.log` files

oxtrust.log (Glu version 3.1.2) ------------------------------------------------------------- 2018-07-21 00:51:35,845 INFO [qtp1689843956-19] [gluu.oxtrust.ws.rs.scim2.UserWebService] (UserWebService.java:104) - ##### SCIM Test Mode is ACTIVE 2018-07-21 00:51:35,846 ERROR [qtp1689843956-19] [gluu.oxtrust.ws.rs.scim2.BaseScimWebService] (BaseScimWebService.java:114) - Failed to check test token java.lang.NullPointerException: null at org.gluu.oxtrust.ws.rs.scim2.BaseScimWebService.processTestModeAuthorization(BaseScimWebService.java:101) [classes/:?] at org.gluu.oxtrust.ws.rs.scim2.UserWebService.searchUsers(UserWebService.java:105) [classes/:?] at org.gluu.oxtrust.ws.rs.scim2.UserWebService$Proxy$_$$_WeldClientProxy.searchUsers(Unknown Source) [classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_112] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_112] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_112] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_112] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:140) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:295) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:249) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:236) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:402) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:209) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:228) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [servlet-api-3.1.jar:3.1.0] at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:845) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1772) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.websocket.server.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:193) [websocket-server-9.3.15.v20161220.jar:9.3.15.v20161220] ------------------------------------------------------------- oxauth.log : 018-07-21 00:41:43,023 INFO [qtp1020391880-19] [org.xdi.oxauth.auth.Authentica tor] (Authenticator.java:217) - Authentication success for Client: '@!25E1.2B9A. 65EC.32DC!0001!4A8E.A672!0008!17DF.EF8C' 2018-07-21 00:46:37,118 ERROR [qtp1020391880-15] [org.xdi.oxauth.model.common.Au thorizationGrant] (AuthorizationGrant.java:147) - Failed to persist entry: oxAut hGrantId=380520ad-5753-46eb-a15b-4b0b7cfb34e6,inum=@!25E1.2B9A.65EC.32DC!0001!4A 8E.A672!0008!17DF.EF8C,ou=clients,o=@!25E1.2B9A.65EC.32DC!0001!4A8E.A672,o=gluu org.gluu.site.ldap.persistence.exception.EntryPersistenceException: Failed to pe rsist entry: oxAuthGrantId=380520ad-5753-46eb-a15b-4b0b7cfb34e6,inum=@!25E1.2B9A .65EC.32DC!0001!4A8E.A672!0008!17DF.EF8C,ou=clients,o=@!25E1.2B9A.65EC.32DC!0001 !4A8E.A672,o=gluu at org.gluu.site.ldap.persistence.LdapEntryManager.persist(LdapEntryMana ger.java:124) ~[oxcore-ldap-3.1.2.Final.jar:?] at org.gluu.site.ldap.persistence.AbstractEntryManager.persist(AbstractE ntryManager.java:90) ~[oxcore-ldap-3.1.2.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager$Proxy$_$$_WeldClientP roxy.persist(Unknown Source) ~[oxcore-ldap-3.1.2.Final.jar:?] at org.xdi.oxauth.service.GrantService.addGrantBranch(GrantService.java: 459) ~[classes/:?] at org.xdi.oxauth.service.GrantService.prepareGrantBranch(GrantService.j ava:465) ~[classes/:?] at org.xdi.oxauth.service.GrantService.persist(GrantService.java:149) ~[ classes/:?] at org.xdi.oxauth.model.common.AuthorizationGrant.persist(AuthorizationG rant.java:193) ~[classes/:?] at org.xdi.oxauth.model.common.AuthorizationGrant.createAccessToken(Auth orizationGrant.java:143) [classes/:?] at org.xdi.oxauth.token.ws.rs.TokenRestWebServiceImpl.requestAccessToken (TokenRestWebServiceImpl.java:159) [classes/:?] at org.xdi.oxauth.token.ws.rs.TokenRestWebServiceImpl$Proxy$_$$_WeldClie ntProxy.requestAccessToken(Unknown Source) [classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0 _112] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl. java:62) ~[?:1.8.0_112] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces sorImpl.java:43) ~[?:1.8.0_112] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_112] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl. java:140) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(Resource MethodInvoker.java:295) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodIn voker.java:249) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodIn voker.java:236) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispa tcher.java:402) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispa tcher.java:209) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher. service(ServletContainerDispatcher.java:228) [resteasy-jaxrs-3.0.21.Final.jar:3. 0.21.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.servi ce(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.servi ce(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [servlet -api-3.1.jar:3.1.0] at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:845 ) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Servlet Handler.java:1772) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.websocket.server.WebSocketUpgradeFilter.doFilter(We bSocketUpgradeFilter.java:193) [websocket-server-9.3.15.v20161220.jar:9.3.15.v20 161220] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Servlet Handler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.ocpsoft.rewrite.servlet.RewriteFilter.doFilter(RewriteFilter.java :226) [rewrite-servlet-3.4.1.Final.jar:3.4.1.Final] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Servlet Handler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.xdi.oxauth.auth.AuthenticationFilter.processBasicAuth(Authenticat ionFilter.java:242) [classes/:?] at org.xdi.oxauth.auth.AuthenticationFilter.doFilter(AuthenticationFilte r.java:112) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Servlet Handler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.gluu.oxserver.filters.AbstractCorsFilter.handleNonCORS(AbstractCo rsFilter.java:343) [oxcore-server-3.1.2.Final.jar:?] at org.gluu.oxserver.filters.AbstractCorsFilter.doFilter(AbstractCorsFil ter.java:120) [oxcore-server-3.1.2.Final.jar:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Servlet Handler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.xdi.oxauth.audit.debug.ServletLoggingFilter.doFilter(ServletLoggi ngFilter.java:55) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Servlet Handler.java:1751) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java :582) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.j ava:143) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.jav a:548) [jetty-security-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandl er.java:226) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandl er.java:1180) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java: 512) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandle r.java:185) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandle r.java:1112) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.j ava:141) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(Cont extHandlerCollection.java:213) [jetty-server-9.3.15.v20161220.jar:9.3.15.v201612 20] at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerColl ection.java:119) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper .java:134) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.Server.handle(Server.java:534) [jetty-server -9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:320) [je tty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.jav a:251) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(Abstra ctConnection.java:283) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:110) [je tty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.SelectChannelEndPoint$2.run(SelectChannelEndPoin t.java:93) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.executeP roduceConsume(ExecuteProduceConsume.java:303) [jetty-util-9.3.15.v20161220.jar:9 .3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.produceC onsume(ExecuteProduceConsume.java:148) [jetty-util-9.3.15.v20161220.jar:9.3.15.v 20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.run(Exec uteProduceConsume.java:136) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPoo l.java:671) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool .java:589) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_112] Caused by: com.unboundid.ldap.sdk.LDAPException: A client-side timeout was encou ntered while waiting 300000ms for a response to add request with message ID 4 fo r entry 'oxAuthGrantId=380520ad-5753-46eb-a15b-4b0b7cfb34e6,inum=@!25E1.2B9A.65E C.32DC!0001!4A8E.A672!0008!17DF.EF8C,ou=clients,o=@!25E1.2B9A.65EC.32DC!0001!4A8 E.A672,o=gluu' from server localhost:1636. at com.unboundid.ldap.sdk.AddRequest.handleResponse(AddRequest.java:1268 ) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AddRequest.process(AddRequest.java:1035) ~[unb oundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.add(LDAPConnection.java:1950) ~ [unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AbstractConnectionPool.add(AbstractConnectionP ool.java:752) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AbstractConnectionPool.add(AbstractConnectionP ool.java:683) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at org.gluu.site.ldap.OperationsFacade.addEntry(OperationsFacade.java:53 3) ~[oxcore-ldap-3.1.2.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.persist(LdapEntryMana ger.java:119) ~[oxcore-ldap-3.1.2.Final.jar:?] ... 61 more 2018-07-21 00:46:37,127 ERROR [qtp1020391880-15] [xdi.oxauth.token.ws.rs.TokenRe stWebServiceImpl] (TokenRestWebServiceImpl.java:324) - null java.lang.NullPointerException: null at org.xdi.oxauth.token.ws.rs.TokenRestWebServiceImpl.requestAccessToken (TokenRestWebServiceImpl.java:160) [classes/:?] at org.xdi.oxauth.token.ws.rs.TokenRestWebServiceImpl$Proxy$_$$_WeldClie ntProxy.requestAccessToken(Unknown Source) [classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0 _112] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl. java:62) ~[?:1.8.0_112] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces sorImpl.java:43) ~[?:1.8.0_112] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_112] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl. java:140) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(Resource MethodInvoker.java:295) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final]

FYI : above exception different from initial exception. I noticed SCIM support was not enabled. I set to true and I set testMode as true as well. after making the changes I am getting above exception.

This error occurs when token pass to oxtrust from oxauth is null. You can see in oxtrust.log a NullPointerException message. So my question is: **Is this a fresh install Gluu 3.1.2?** https://gluu.org/docs/ce/user-management/scim2/#protection-using-test-mode https://gluu.org/docs/ce/user-management/scim2/#protection-using-uma

Is this a fresh install Gluu 3.1.2 - YES. I created the ScimClient as suggested here https://gluu.org/docs/ce/user-management/scim2/#protection-using-uma when I test via ScimClient I get 401 Unauthorized. oxtrust.log shows invalid authentication method type. but in java scim client I am not giving any authentication type. In Gluu it is configured as client_secret_basic Could you please help . I also tried submitting the request via postman. I get the same error created the token as Base64 string from byteArray of clientId:clientsecret ScimClient log: java.lang.NullPointerException: null at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:161) at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) at gluu.scim2.client.UmaScimClient.getAuthorizedRpt(UmaScimClient.java:158) at gluu.scim2.client.UmaScimClient.obtainAuthorizedRpt(UmaScimClient.java:179) at gluu.scim2.client.UmaScimClient.authorize(UmaScimClient.java:103) at gluu.scim2.client.AbstractScimClient.isNeededToAuthorize(AbstractScimClient.java:55) ............... ............... Caused by: gluu.scim2.client.exception.ScimInitializationException: Error status 401 Unauthorized returned at gluu.scim2.client.UmaScimClient.getAuthorizedRpt(UmaScimClient.java:173) at gluu.scim2.client.UmaScimClient.obtainAuthorizedRpt(UmaScimClient.java:179) ... 102 common frames omitted Caused by: org.jboss.resteasy.client.ClientResponseFailure: Error status 401 Unauthorized returned at org.jboss.resteasy.client.core.BaseClientResponse.createResponseFailure(BaseClientResponse.java:570) at org.jboss.resteasy.client.core.BaseClientResponse.createResponseFailure(BaseClientResponse.java:561) at org.jboss.resteasy.client.core.BaseClientResponse.checkFailureStatus(BaseClientResponse.java:555) at org.jboss.resteasy.client.core.extractors.BodyEntityExtractor.extractEntity(BodyEntityExtractor.java:37) at org.jboss.resteasy.client.core.ClientInvoker.invoke(ClientInvoker.java:125) at org.jboss.resteasy.client.core.ClientProxy.invoke(ClientProxy.java:88) at com.sun.proxy.$Proxy227.requestJwtAuthorizationRpt(Unknown Source) at gluu.scim2.client.UmaScimClient.getAuthorizedRpt(UmaScimClient.java:158) ################################################################# PostMan respond with 401 - Invalid client ################################################################# oxauth.log 2018-07-21 13:21:19,880 INFO [qtp1020391880-19] [org.xdi.oxauth.auth.AuthenticationFilter] (AuthenticationFilter.java:252) - Basic authentication failed java.lang.Exception: The Token Authentication Method is not valid. at org.xdi.oxauth.auth.AuthenticationFilter.processBasicAuth(AuthenticationFilter.java:229) [classes/:?] at org.xdi.oxauth.auth.AuthenticationFilter.doFilter(AuthenticationFilter.java:112) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.gluu.oxserver.filters.AbstractCorsFilter.handleNonCORS(AbstractCorsFilter.java:343) [oxcore-server-3.1.2.Final.jar:?] at org.gluu.oxserver.filters.AbstractCorsFilter.doFilter(AbstractCorsFilter.java:120) [oxcore-server-3.1.2.Final.jar:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.xdi.oxauth.audit.debug.ServletLoggingFilter.doFilter(ServletLoggingFilter.java:55) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1751) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:582) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:548) [jetty-security-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:226) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1180) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:512) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1112) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:213) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:119) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:134) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.Server.handle(Server.java:534) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:320) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:251) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:283) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:110) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.SelectChannelEndPoint$2.run(SelectChannelEndPoint.java:93) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.executeProduceConsume(ExecuteProduceConsume.java:303) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.produceConsume(ExecuteProduceConsume.java:148) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.run(ExecuteProduceConsume.java:136) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:671) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:589) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_112]

Hi DHANAPAL, The documentation is clear enough and when i follow it end up with a working sample. Found in attachment a sample project you can import in your IDE and run. Make sure to changes the parameters to match your own settings. Note That is two mode for scim: **test mode** and **uma protection mode**. Always make sure the **test mode** is disable when the **uma protection mode** is enable and vice vercsa.

thanks for sample project. i have exact same cod ein my local as well. Could you please confirm this. I am trying to UMA protection mode and I am getting an error message as **Invalid Authentication type**. when I hit below endpoint , I see authentication type as "UMA" . is it correct ? doumentation shows as "oauth2". URL : /identity/restv1/scim/v2/ServiceProviderConfig "authenticationSchemes": [ { "name": "UMA 2.0", "description": "UMA Authentication Scheme", "specUrl": "https://docs.kantarainitiative.org/uma/ed/oauth-uma-grant-2.0-06.html", "documentationUrl": "https://www.gluu.org/docs/ce/admin-guide/uma/", "type": "uma", "primary": true } ] Do I need to change it to oauth2, could you please help me how do I that ?

Hmm, can you be more specific about what you want? Here is how to it you should test the SCIM. 1. Enable scim and the test mode and make call, if it is okay 1. Then you can move to UMA mode(disable test mode and enable uma mode) At which step are you right now?

I have enabled to SCIM support. Default Authentication Method set : bycrypt for both Default acr: bycrypt oxTrust acr: bycrypt I set as auth_ldap_server for both ended in same error ( invalid authentication type) . in my same code I got for 401 but I assume it has to be Default. Please help me to configure as Default I assume. I tried the documentation may be I am looking at wrng place https://gluu.org/docs/ce/3.1.2/admin-guide/oxtrust-ui/

Nowhere in SCIM documentation the Authentication method is mentioned. 1. Enable scim and the test mode and make call, if it is okay 2. Then you can move to UMA mode(disable test mode and enable uma mode) At which step are you right now?

ok. how do you enable uma mode ?

https://gluu.org/docs/ce/user-management/scim2/#protection-using-uma

sorry for too many questions. when I enable the test mode. I get below error in identity/oxtrust.log 2018-07-23 13:57:54,594 INFO [qtp1689843956-10] [gluu.oxtrust.ws.rs.scim2.UserWebService] (UserWebService.java:104) - ##### SCIM Test Mode is ACTIVE 2018-07-23 13:57:54,594 ERROR [qtp1689843956-10] [gluu.oxtrust.ws.rs.scim2.BaseScimWebService] (BaseScimWebService.java:114) - Failed to check test token java.lang.NullPointerException: null at org.gluu.oxtrust.ws.rs.scim2.BaseScimWebService.processTestModeAuthorization(BaseScimWebService.java:101) [classes/:?] at org.gluu.oxtrust.ws.rs.scim2.UserWebService.searchUsers(UserWebService.java:105) [classes/:?] at org.gluu.oxtrust.ws.rs.scim2.UserWebService$Proxy$_$$_WeldClientProxy.searchUsers(Unknown Source) [classes/:?] at sun.reflect.GeneratedMethodAccessor1743.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_112]

hmm, please we don't have enough time to help about process that are well documented. i used 30 min this morning to setup what you want to do just by following the documentation. 1. Enable scim and the test mode and make call, if it is okay 2. Then you can move to UMA mode(disable test mode and enable uma mode) At which step are you right now?

One thing i forget is that each gluu version has it own documentation. Scim documentation for Gluu 3.1.2 is here https://gluu.org/docs/ce/3.1.2/user-management/scim2/

we want to go with UMA mode. i deleted SCIM client and recreated . 1. enabled SCIM Support 2. enabled UMS protection mode 3. followed the same steps as sample project. I still get the same error (Invalid authentication method). this time I followed every single step. Please find the error log : 2018-07-23 14:38:15,552 INFO [qtp1020391880-10] [org.xdi.oxauth.auth.AuthenticationFilter] (AuthenticationFilter.java:395) - JWT authentication failed: {} org.xdi.oxauth.model.exception.InvalidJwtException: Cannot verify the JWT at org.xdi.oxauth.model.token.ClientAssertion.<init>(ClientAssertion.java:50) ~[classes/:?] at org.xdi.oxauth.auth.AuthenticationFilter.processJwtAuth(AuthenticationFilter.java:371) [classes/:?] at org.xdi.oxauth.auth.AuthenticationFilter.doFilter(AuthenticationFilter.java:109) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.gluu.oxserver.filters.AbstractCorsFilter.handleNonCORS(AbstractCorsFilter.java:343) [oxcore-server-3.1.2.Final.jar:?] at org.gluu.oxserver.filters.AbstractCorsFilter.doFilter(AbstractCorsFilter.java:120) [oxcore-server-3.1.2.Final.jar:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.xdi.oxauth.audit.debug.ServletLoggingFilter.doFilter(ServletLoggingFilter.java:55) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1751) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:582) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:548) [jetty-security-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:226) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1180) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:512) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1112) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:213) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:119) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:134) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.Server.handle(Server.java:534) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:320) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:251) [jetty-server-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:283) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:110) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.io.SelectChannelEndPoint$2.run(SelectChannelEndPoint.java:93) [jetty-io-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.executeProduceConsume(ExecuteProduceConsume.java:303) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.produceConsume(ExecuteProduceConsume.java:148) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.run(ExecuteProduceConsume.java:136) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:671) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:589) [jetty-util-9.3.15.v20161220.jar:9.3.15.v20161220] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_112] Caused by: org.xdi.oxauth.model.exception.InvalidJwtException: Invalid authentication method at org.xdi.oxauth.model.token.ClientAssertion.load(ClientAssertion.java:127) ~[classes/:?] at org.xdi.oxauth.model.token.ClientAssertion.<init>(ClientAssertion.java:44) ~[classes/:?] ... 32 more

Have you try the test mode first?

Yes. I was getting below error. I already spent 2 days on this. didnt want spend more on this. thats why directly going to UMA. ##### SCIM Test Mode is ACTIVE 2018-07-23 13:57:54,594 ERROR [qtp1689843956-10] [gluu.oxtrust.ws.rs.scim2.BaseScimWebService] (BaseScimWebService.java:114) - Failed to check test token java.lang.NullPointerException: null at org.gluu.oxtrust.ws.rs.scim2.BaseScimWebService.processTestModeAuthorization(BaseScimWebService.java:101) [classes/:?] with UMA mode, why would it give invalif Authentication type when we dont mention anywhere ? is cross checking anywhere behind the screen ?

Using the code i sent you this morning: The the following: 1. Specific in your code that you aren't using a uma mode ``` GluuScimRepository scimRepository = GluuScimRepository.builder().withDomain(domain).withOIDCUrl(url) .withUmaAatClientId(umaAatClientId).withUmaAatClientJksPassword(umaAatClientJksPassword) .withUmaAatClientJksPath(umaAatClientJksPath).withUmaAatClientKeyId(umaAatClientKeyId).build() .useUma(false); ``` 2. Go to Gluu server admin UI enable scim test mode and disable uma mode. And test the call **scimRepository.searchUsers();** That should work then you can move to the next step.

Please do it as fast as you can.

have a very basic question. GluuScimRepository is availbale in scim client jar ? I couldnt import. I this code ScimClient client = ScimClientFactory.getClient(domain, null, umaAatClientId, umaAatClientJksPath, umaAatClientJksPassword, umaAatClientKeyId); BaseClientResponse<ListResponse> response = null; try { response = client.searchUsers(idpSearchUser.getFilter(), 1, 1, "", "", null); } catch (IOException e) { // TODO Auto-generated catch block e.printStackTrace(); } return response.getEntity().getResources();

It seems like your are using scim-client2 instead of scim-client. scim-client2 is for Gluu Server 3.1.3 For text mode the client is initialized like this: ``` client = ScimClientFactory.getTestClient(domainURL, OIDCMetadataUrl); ``` in uma mode is is like this: ``` client = ScimClientFactory.getClient(domainURL,OIDCMetadataUrl,umaAatClientId,umaAatClientJksPath,umaAatClientJksPassword,umaAatClientKeyId); ```

my gluu is 3.1.2 i get the below error 2018-07-23 15:11:03,215 INFO [qtp1689843956-18] [gluu.oxtrust.ws.rs.scim2.UserWebService] (UserWebService.java:104) - ##### SCIM Test Mode is ACTIVE 2018-07-23 15:11:03,215 ERROR [qtp1689843956-18] [gluu.oxtrust.ws.rs.scim2.BaseScimWebService] (BaseScimWebService.java:114) - Failed to check test token java.lang.NullPointerException: null at org.gluu.oxtrust.ws.rs.scim2.BaseScimWebService.processTestModeAuthorization(BaseScimWebService.java:101) [classes/:?] at org.gluu.oxtrust.ws.rs.scim2.UserWebService.searchUsers(UserWebService.java:105) [classes/:?] at org.gluu.oxtrust.ws.rs.scim2.UserWebService$Proxy$_$$_WeldClientProxy.searchUsers(Unknown Source) [classes/:?] at sun.reflect.GeneratedMethodAccessor1743.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_112] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_112] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:140) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:295) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:249) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:236) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:402) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:209) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:228) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.0.21.Final.jar:3.0.21.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [servlet-api-3.1.jar:3.1.0] at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:845) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.eclipse.jetty.servlet.Serv