I-D Action: draft-kushwaha-scim-attr-cursor-pagination-01.txt

Internet-Draft draft-kushwaha-scim-attr-cursor-pagination-01.txt is now
available.

   Title:   Cursor-Based Pagination and Deferred Retrieval for Multi-Valued Attributes in SCIM 2.0
   Author:  Saurabh Kushwaha
   Name:    draft-kushwaha-scim-attr-cursor-pagination-01.txt
   Pages:   48
   Dates:   2026-08-30

Abstract:

   [RFC7643] defines Group.members with the returned: default
   characteristic, so a conformant service provider is required to
   return the attribute in response to GET /Groups/{id}. [RFC7644]
   defines no bound on the number of values that attribute may contain.
   A service provider holding a group with millions of members therefore
   has no conformant and interoperable way to answer a request that a
   client is entitled to make.  In practice providers diverge: they
   truncate silently, reject the request, omit the attribute, or fail.
   A client cannot discover in advance which behavior it will encounter.

   This document defines that missing behavior.  It specifies discovery
   so a client can learn how a service provider treats a high-
   cardinality attribute, a bounded response with a defined continuation
   contract, and rules preventing a partial representation from being
   mistaken for complete resource state.

   The mechanism has two forms.  A request for one resource returns a
   bounded page of one protected multi-valued attribute with an opaque
   cursor when more values exist.  A collection search returns parent
   resources without loading protected attributes, each carrying an
   authoritative link for retrieving that attribute.  The attribute
   remains part of its parent resource; this document does not create a
   top-level resource for each attribute value, and it is not a
   substitute for doing so where independent relationship lifecycle or
   cross-collection query is required (Section 16.4).

   Although the mechanism is defined generally and applies to any
   complex multi-valued attribute a service provider designates as
   protected, the attributes that reach problematic sizes in deployed
   SCIM services are predominantly Group.members and User.groups among
   those defined in [RFC7643], together with implementation-specific
   assignment attributes (Section 3).

   This document updates [RFC7643] and [RFC7644].  It adds attributes to
   existing structures defined by those documents and defines attribute-
   return behavior that replaces the requirements of Section 3.9 of
   [RFC7644] within a negotiated scope.  It does not change the behavior
   of deployments that do not implement it: the modified attribute-
   selection behavior described in Section 4 applies only between a
   service provider that has advertised this capability and a client for
   which deferred retrieval has been established through the negotiation
   mechanisms defined in this document.  It defines discovery metadata,
   the attributeCount and attributeCursor query parameters, response
   metadata, processing and compatibility rules, mutation safety, error
   handling, cursor security, and operational limits.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-kushwaha-scim-attr-cursor-pagination/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-kushwaha-scim-attr-cursor-pagination-01.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-kushwaha-scim-attr-cursor-pagination-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]