rest - 使用 REST API 时忽略 WSO2 SCIM 扩展

Question

我正在运行 WSO2 身份服务器的默认配置并尝试使用描述的 SCIM 扩展 here

我已将 provisioning-config.xml 缩减为 ...

[
{
"attributeURI":"urn:scim:schemas:extension:wso2:1.0:wso2Extension.employeeNumber",
"attributeName":"employeeNumber",
"dataType":"string",
"multiValued":"false",
"multiValuedAttributeChildName":"null",
"description":"Numeric or alphanumeric identifier assigned to a person, typically based on order of hire or association with an organization",
"schemaURI":"urn:scim:schemas:extension:wso2:1.0",
"readOnly":"true",
"required":"false",
"caseExact":"true",
"subAttributes":"null" 
}
]

我还为 urn:scim:schemas:core:1.0 申请了这个扩展

Description Employee Number
Claim Uri   urn:scim:schemas:extension:wso2:1.0:wso2Extension.employeeNumber
Mapped Attribute (s)    employeeNumber
Regular Expression  null
Display Order   0
Supported by Default    true
Required    false
Read-only   true

当我使用此命令添加用户时，用户被添加但扩展属性被忽略。

curl -v -k --user admin:admin --data "{"schemas":[],"userName":"SureshAtt","password":"Wso2@123","wso2Extension":{"employeeNumber":"000111"},"externalId": "701984"}" --header "Content-Type:application/json" https://localhost:9443/wso2/scim/Users

当我直接查看 LDAP 服务器时，我看到了用户和除扩展名之外的所有属性。

不确定我做错了什么。我已经重新启动了 WSO2 服务器，但这没有帮助。

Answer 1

我猜你指向的文件是“scim-schema-extension.config”。要正确使用 SCIM 扩展，您应该按以下方式进行缩减。

[
{
"attributeURI":"urn:scim:schemas:extension:wso2:1.0:wso2Extension.employeeNumber",
"attributeName":"employeeNumber",
"dataType":"string",
"multiValued":"false",
"multiValuedAttributeChildName":"null",
"description":"Numeric or alphanumeric identifier assigned to a person, typically based on order of hire or association with an organization",
"schemaURI":"urn:scim:schemas:extension:wso2:1.0",
"readOnly":"true",
"required":"true",
"caseExact":"true",
"subAttributes":"null" 
},
{
"attributeURI":"urn:scim:schemas:extension:wso2:1.0",
"attributeName":"wso2Extension",
"dataType":"null",
"multiValued":"false",
"multiValuedAttributeChildName":"null",
"description":"SCIM wso2 User Schema Extension",
"schemaURI":"urn:scim:schemas:extension:wso2:1.0",
"readOnly":"false",
"required":"false",
"caseExact":"false",
"subAttributes":"employeeNumber" 
}

]

请注意，wso2.extension 元素位于底部，在它的子属性下我包含了 employeeNumber。这应该可以与您发布的 cURL 命令一起使用。希望这会有所帮助。