**Session Date/Time:** 07 Nov 2022 13:00

# scim

## Summary
The SCIM working group met to discuss several drafts and proposals.  Key topics included device onboarding using SCIM, roles and entitlements, referential values in schemas, cursor-based pagination, and upcoming work on HR schemas and a security BCP. Discussions focused on use cases, overlapping functionalities between different drafts, and potential solutions for efficiently synchronizing data.

## Key Discussion Points

*   **SCIM for Devices (Elliot):**
    *   Discussion about provisioning and bootstrapping devices (e.g., IoT devices) using SCIM.
    *   Considered the suitability of SCIM versus other technologies like Netconf/RESTCONF/Yang for device description.
    *   Leif raised concerns from the Adrian community regarding Wi-Fi schemas and deployability challenges.
    *   Potential use cases for FIDO Device Onboarding and Matter were discussed.
*   **Use Cases Draft (Pam):**
    *   Question raised about the implementation and interpretation of external IDs and provisioning domains.
    *   Pam inquired whether different external IDs are mapped to different provisioning domains in existing implementations.
*   **SCIM Roles and Entitlements (Danny):**
    *   Draft proposes new roles and entitlements endpoints for clients to discover available values.
    *   Discussion on expanding roles/entitlements resources to include a members attribute.
    *   Clarification needed on the usage of sub-attributes (especially "type") within roles and entitlements.
    *   Consideration of prerequisites or conflicting relationships between roles/entitlements.
*   **Referential Value and Location (Danny):**
    *   Draft aims to define properties for attributes that accept values from a limited set, enabling discovery and automation.
    *   Dean suggested a need for filtering capabilities on referential values (e.g., only managers with a specific role).
    *   Pam raised security concerns related to callouts to foreign servers for referential values.
    *   Broader discussion on the need for new schema properties, such as cardinality for multi-valued attributes.
*   **Cursor-Based Pagination (Danny, on behalf of Matt Peterson):**
    *   Status update on the cursor-based pagination draft.
    *   Discussed the coexistence and overlap with the skim events draft and potential future Delta query mechanisms.
    *   Highlighted the benefits of cursor-based pagination for efficient retrieval of data, especially for initial data synchronization.
    *   Daryl suggested combining events with Delta query for improved reliability.
    *   Discussion about the need for synchronization use cases and potential solutions using a Watermark based system.
*   **Upcoming Work (Danny):**
    *   Human Resources Schema (standardizing worker/employee representation).
    *   Delta Query (efficient synchronization of changes).
    *   Security Best Current Practices (guidance on secure SCIM implementations).
    *   Reference Attribute URL Authorization (addressing authorization issues for reference URLs, like profile pictures).

## Decisions and Action Items

*   **Action Item:** Elliot to contact Leif to discuss experiences with Wi-Fi schema.
*   **Action Item:** Pam to post her question regarding external IDs and provisioning domains on the mailing list.
*   **Action Item:** Danny to work with others on the discussion of referential values offline to determine if those values are able to be filtered.
*   **Action Item:** Danny and Matt to clarify the use cases for cursor-based pagination in the draft's introduction.
*   **Action Item:** Authors of the cursor-based pagination draft to prepare for a call for adoption.
*   **Action Item:** Danny to reach out for assistance on Delta query (Daryl volunteered).

## Next Steps

*   Continue providing feedback and comments on the drafts under discussion.
*   Progress work on the upcoming drafts: Human Resources schema, Delta query, Security BCP, and Reference Attribute URL Authorization.
*   A side meeting is scheduled for Wednesday at 4 PM local time (with Zoom option).