帐户锁定属性未添加以响应 scim2 GET 用户 API in wso2

Question

我正在尝试检索在 WSO2 IS 5.9 版本中锁定帐户的用户列表。 在将帐户锁定属性添加到以下声明后，我尝试了：

• http://schemas.xmlsoap.org/ws/2005/05/identity

• 瓮：ietf：参数：scim：架构：核心：2.0

• urn:ietf:params:scim:schemas:core:2.0:User

• urn:ietf:params:scim:schemas:extension:enterprise:2.0:User

我也按照下面的 URL 以及添加自定义声明： https://is.docs.wso2.com/en/5.9.0/developextending-im2

{ "attributeURI":"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:accountLock",
 "attributeName":"accountLock",
 "dataType":"boolean",
 "multiValued":"false",
 "description":"Account lock",
 "required":"false",
 "caseExact":"false",
 "mutability":"readwrite",
 "returned":"default",
 "uniqueness":"none",
 "subAttributes":"null",
 "multiValuedAttributeChildName":"null",
 "canonicalValues":[],
"referenceTypes":[]
}

但我仍然无法获得 accountLock 属性以响应 scim2 的 GET Users API。

回复

   "totalResults": 10,
   "startIndex": 1,
   "itemsPerPage": 10,
   "schemas": [
       "urn:ietf:params:scim:api:messages:2.0:ListResponse"
   ],
   "Resources": [
       
       {
           "emails": [
               "divya@abc.com"
           ],
           "meta": {
               "created": "2020-06-25T07:49:35.465Z",
               "lastModified": "2020-06-25T11:20:13.482Z",
               "resourceType": "User"
           },
           "name": {
               "givenName": "guest",
               "familyName": "guest"
           },
           "groups": [
               {
                   "display": "Application/sp1"
               },
               {
                   "display": "Application/sp2"
               },
               {
                   "display": "Application/Read"
               }
           ],
           "id": "9ffbed2e-3703-470c-a2c8-e738f4c09709",
           "userName": "guest12"
       }
   ]}```

Answer 1

以下原因可能会导致 accoutLock 属性未出现在 SCIM2 GET 用户响应中。

1. 您可能错过了添加新属性 ("urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:accountLock")作为 urn:ietf:params:scim:schemas:extension:enterprise 的子属性： 2.0：用户 object。 （ https://is.docs.wso2.com/en/5.9.0/develop/extending-scim2-user-schemas/#extending-the-scim-20-api中的第 3 点。“subAttributes”：“ accoutLock verifyEmail问密码员工人数成本中心组织部部门经理")

     "attributeURI":"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User", "attributeName":"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User", "dataType ":"complex", "multiValued":"false", "description":"Enterprise User", "required":"false", "caseExact":"false", "mutability":"readWrite", "returned" :"default", "uniqueness":"none", "subAttributes":"accoutLock verifyEmail askPassword employeeNumber costCenter 组织部门部门经理", "canonicalValues":[], "referenceTypes":["external"] }```

2. 添加的自定义声明（ https://is.docs.wso2.com/en/5.9.0/develop/extending-scim2-user-schemas/#add-the-custom-claim ）的映射属性应该是现有的如果您使用默认的 LDAP 用户存储，则在 LDAP 架构中的属性。 （但是，如果您犯了这个错误，您将无法更新/添加声明值。它会为用户提供One or more attributes you are trying to add/update are not supported by underlying LDAP for user:错误）

3. SCIM2 GET 用户的响应不包含没有值的属性。 因此，将 true/false 设置为声明值。

此外，将新属性添加到 urn:ietf:params:scim:schemas:extension:enterprise:2.0:User claim dialect 就足够了。 按照https://is.docs.wso2.com/en/5.9.0/develop/extending-scim2-user-schemas/中的步骤操作