Skip to main content

v26.2.16

v26.2.16​

SCIM accepts schema-qualified attribute paths in PATCH and filters​

SCIM endpoints now accept attribute paths and filters that are qualified with a full schema URN, as some identity providers (for example Microsoft Entra) send.

Previously a PATCH operation whose path was qualified with a schema URN — for example urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager — failed with Could not decode request body. Those paths now parse and apply correctly. The same applies to filter query parameters on the Users and Groups list endpoints and to value-path filters inside a patch path.

A patch path or filter qualified with a schema the resource does not support is now rejected with a clear 400 error that names the schema. The schema comparison is case-insensitive.

SCIM request bodies and filter query parameters are now size-limited; an oversized body is rejected with 413 instead of being read in full, and an over-long filter with 400.

Ory Network

The largest Identity and Access Management network in the world. So you can get back to building your business.

Sign up for free