snipe-it icon indicating copy to clipboard operation
snipe-it copied to clipboard

SCIM - Disabled users error

Open Speed1 opened this issue 10 months ago • 4 comments

Debug mode

Describe the bug

Hi,

we have some users that are provisioned via Azure Active Directory SCIM. If one of these users gets disabled, because he leaves the company, the provisioning throws an error message:

Screenshot 2024-04-12 at 15 37 47

as soon I enable the scim log via SCIM_TRACE=true in the .env file the inactive value is set correctly and the error during the provisioning disappears and everything works correctly.

Screenshot 2024-04-12 at 15 38 42 Screenshot 2024-04-12 at 15 38 55

Let me know if you need further info.

Reproduction steps

  1. Provision a user via Azure Active Directory SCIM
  2. Disable the user in the source System
  3. Wait until the next provisioning cycle will occur
  4. The provisioning Log will throw an error for this user (see screenshot above)
  5. Enable SCIM logging via SCIM_TRACE=true
  6. The next provisioning cycle will apply the operation on the user without error

Expected behavior

This should work without enabling the SCIM_TRACE=true in the .env file

Screenshots

No response

Snipe-IT Version

6.3.4

Operating System

Red Hat

Web Server

Apache

PHP Version

7.4.33

Operating System

No response

Browser

No response

Version

No response

Device

No response

Operating System

No response

Browser

No response

Version

No response

Error messages

No response

Additional context

No response

Speed1 avatar Apr 12 '24 14:04 Speed1

Because of the 'method Not Allowed' message up there, I'm wondering if you've left the DELETE verb enabled - we don't support that (because the underlying library doesn't, and even if it did, I don't know that we would be able to - you shouldn't be able to delete a user who has assets assigned to them, or anything else pointing at them)

uberbrady avatar Jun 25 '24 13:06 uberbrady

Hi Brady,

sorry for the late reply, I totally forgot about this issue. We have the DELETE verb not enabled, only CREATE and UPDATE

Screenshot 2024-09-13 at 11 40 37

Best Alex

Speed1 avatar Sep 13 '24 09:09 Speed1