My Oracle Support Banner

SCIM Does not Return Correct Users When Using Endpoint /iam/governance/scim/v1/UsersFilter and Filter has Dates like meta.lastModified and meta.created (Doc ID 2513078.1)

Last updated on SEPTEMBER 11, 2024

Applies to:

Identity Manager - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

Several users where created in OIM on March 1st at different times:

Querying the USR table shows the following:

alter session set nls_date_format='YYYY-MM-DD HH24:MI:SS';

select usr_key,usr_login,,usr_create,usr_update from usr;

 

usr_key |  usr_login |           usr_create           |       usr_update

--------------------------------------------------------------------------------

  <KEY>1  |      <USER>1    |   2019-03-01  09:00:00   |  2019-03-01  09:00:00

  <KEY>2  |       <USER>2    |   2019-03-01   10:00:00  |  2019-03-01  10:00:00

  <KEY>3  |      <USER>3    |   2019-03-01  11:00:00   |  2019-03-01  11:00:00

Note: we assume dates are in Zulu time to simplify

Using SCIM we want to retrieve all the users that have been updated after 2019-03-01  10:00:00.

Expected result would be to only obtain user pedro3

We submit a get to the users scim endpoint as below:

GET http://oim_host:oim_port0/iam/governance/scim/v1/Users?attributes=id,meta.lastModified&filter=(meta.lastModified gt 2019-03-01T10:00:00Z)  

and we get the 3 users instead of 1:

 

{

    "schemas": [

    "urn:ietf:params:scim:api:messages:2.0:ListResponse"

   ],

   "totalResults": 3,

   "Resources": [

      {

         "meta": {

         "lastModified": "2019-03-01T09:00:00.000Z"

      },

      "userName": "<USER>1",

      "id": "<KEY>1"

     },

    {

      "meta": {

      "lastModified": "2019-03-01T10:00:00.000Z"

    },

    "userName": "<USER>2,

    "id": "<KEY>2"

    },

   {

    "meta": {

    "lastModified": "2019-03-01T11:00:00.000Z"

    },

   "userName": "<USER>3",

   "id": "<KEY>3"

   }

]

}

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.