d0590bc9b9
Fix location of SCIM resources so IDs don't appear twice in the URL
...
Closes #49176
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-05-26 07:33:24 -03:00
493145b4ce
Align the format of the annotation kc.scim.schema.attribute to how SCIM defines custom schema attributes
...
Closes #48632
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-05-07 13:32:00 +00:00
401adc453e
Allow mapping user attributes to SCIM attributes via User Profile UI
...
Closes #48347
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-05-07 07:59:24 -03:00
8add9b0c00
Enforce non-empty role and group names
...
Closes #48459
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-05-07 07:32:12 +02:00
98e9ec6028
Support for custom user scim extension
...
Closes #48345
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-04-29 21:28:11 +02:00
0fadd8e659
Add id and description when building ResourceType representation ( #48499 )
...
Closes #48464
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-04-27 12:40:00 +00:00
17a3738592
Refactor builders in testsuite part 1 ( #48315 )
...
Refactor builders in testsuite part 1
Closes #48323
Signed-off-by: stianst <stianst@gmail.com >
2026-04-23 12:35:16 +02:00
6a4f865013
Support for managing members via group resource type
...
Closes #46216
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-04-02 20:06:12 +02:00
c965fcffc4
Review error responses
...
Closes #47643
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-04-02 12:19:23 +02:00
cb8b6e3e18
SCIM Authorization Bypass in User Group Management
...
Closes #47536
Signed-off-by: vramik <vramik@redhat.com >
2026-04-01 07:36:34 -03:00
e285560033
Add externalId attribute to group resource type
...
Closes #47481
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
# Conflicts:
# scim/core/src/main/java/org/keycloak/scim/resource/schema/attribute/Attribute.java
# scim/model/src/main/java/org/keycloak/scim/model/schema/SchemaResourceTypeProvider.java
2026-03-31 11:17:24 +02:00
9584b9296c
Add a new SCIM filter evaluator to be used in remove PATCH filters
...
Closes #47606
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-30 17:56:46 -03:00
ed5a2e0f00
Request and exclude attributes based on the parent or schema extension
...
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-27 17:11:37 -03:00
ea89f8a492
Add additional tests
...
Closes #47268
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2026-03-27 17:11:37 -03:00
a99482be22
Case-insensitive attribute matching
...
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-27 17:11:37 -03:00
1829caccc8
Add support for attribute filtering in SCIM
...
Closes #47268
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2026-03-27 17:11:37 -03:00
a4796fe801
Add view-realm admin role check to SCIM discovery endpoints
...
Closes #46859
Signed-off-by: vramik <vramik@redhat.com >
2026-03-24 08:56:43 -03:00
aba0b71ea2
Enforce realm admin roles and permission when managing resources
...
Closes #47072
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-17 20:30:25 +01:00
a420190942
Add suppor for complex attribute notation in SCIM filters
...
Closes #47222
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-17 12:43:18 -03:00
7f6b7a85f6
Minor improvements to scim
...
Closes #47059
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-13 11:06:25 +01:00
9cc536d14c
Expose supported schemas through the Schemas endpoint
...
Closes #46217
Signed-off-by: vramik <vramik@redhat.com >
2026-03-12 09:12:22 -03:00
89d58997ce
SCIM Make sure admin events are fired when managing resource types
...
Closes #46295
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2026-03-11 11:32:21 -03:00
fcb9bdd3e9
Support for querying group members through the User API
...
Closes #46226
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-11 13:39:17 +01:00
d710c6a4b9
Refactor ScimJPAPredicateProvider
...
- remove duplicate code in createPresencePredicate and createComparisonPredicate
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-10 11:26:53 -03:00
a6b31e879f
SCIM Track the last time a resource was modified
...
Closes #46223
Signed-off-by: Martin Kanis <mkanis@redhat.com >
2026-03-10 14:41:07 +01:00
623f942070
Support for groups attribute from User core schema
...
Closes #46215
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-06 04:33:17 -03:00
83578f8a73
Add default maxResults of 100 when searching SCIM resources
...
- also introduce count methods to return correct totalResults in search responses
Closes #46684
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-04 08:50:54 -03:00
b93e249fc9
Fix GroupResourceTypeProvider to exclude organization groups
...
- also order by name to be consistent with no-filter searches
Closes #46684
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-04 08:50:54 -03:00
2e1f3625e0
Fix UserResourceTypeProvider to exclude service accounts
...
- also order by username to be consistent with no-filter searches
- further enhancements to FilterTest
Closes #46684
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-04 08:50:54 -03:00
df80c10fce
Enhancements to FilterTest
...
- increased coverage to all filter operators
- tests problematic expressions
Closes #46684
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-04 08:50:54 -03:00
505471c9a6
Refactor ScimJPAPredicateProvider to better detect invalid filter expressions
...
- also fixes issue with query.where() being erroneously called by the provider
Closes #46684
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-03-04 08:50:54 -03:00
6cab34e441
Make sure ids match when performing a PUT
...
Closes #46658
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-03 13:36:16 +01:00
884e46d125
Enable and disable SCIM API to a realm through the administration console
...
Closes #46755
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-03 10:16:30 +01:00
d52e5a1234
Support for PATCH operations ( #46561 )
...
Closes #46214
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-03-03 09:00:28 +01:00
857b0e6925
Add support for filtering on SCIM endpoints
...
Closes #46221
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com >
2026-02-27 12:20:01 -03:00
3e3a7befd1
Initial code for SCIM core and testsuite ( #45978 )
...
Closes #45712
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com >
2026-02-23 18:22:25 +01:00
Stefan Guilhen
Pedro Igor
Stian Thorgersen
vramik
Martin Kanis
Martin Kanis