azure active directory – PATCH /Groups for AzureAD SCIM synchronization fails

Im currently trying to implement the SCIM protocol for synchronizing Users & Groups from AzureAD into my application.

For development I use a MS tutorial and the RFC for SCIM:

For validation of my endpoints I use Microsofts AzureAD SCIM Validator: scimvalidator.microsoft.com/

Running the validation I only get one error message:
i.stack.imgur.com/Ru5KU.png

The belonging Group was created by SCIM Validator using the following request:

POST /scim/Groups 1.1
Host: ngrok-free.app
Content-Type: application/scim+json; charset=utf-8
{
  "displayName": "3TCVOGSGK5K3",
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:Group"
  ]
}

The PATCH request in question is

PATCH /scim/Groups/66f04454-be03-446b-885b-dad2f37568f9 1.1
Host: ngrok-free.app
Content-Type: application/scim+json; charset=utf-8
{
  "Operations": [
    {
      "op": "replace",
      "path": "members[type eq \"untyped\"].value",
      "value": "P781Y6CGE6C6"
    },
    {
      "op": "replace",
      "value": {
        "displayName": "BXCXL6SD5JFM"
      }
    }
  ],
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:PatchOp"
  ]
}

Which gets the following response by my endpoint

Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Date: Thu, 08 Jun 2023 17:51:30 GMT
Pragma: no-cache
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 0
Transfer-Encoding: chunked
Content-Type: application/scim+json
Expires: 0

{
  "displayName": "BXCXL6SD5JFM",
  "id": "66f04454-be03-446b-885b-dad2f37568f9",
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:Group"
  ]
}

What I do when recieving the request is replacing all members of the group with the one mentioned in the value (“P781Y6CGE6C6”).

I dont know what the wanted behavior is for this request – maybe anyone understands it better and can explain it to me?

Best Regards

Read more here: Source link