如何在 wso2 中创建用户是通过 scim2 api 与外部声明&

Question

我正在尝试通过 scim2 api 创建具有外部声明的用户。 首先我创建声明http://wso2.org/claims/inn

然后我向架构添加声明：urn:ietf:params:scim:schemas:extension:enterprise:2.0:User

最后我发送创建用户的请求：

{
    "schemas": ["urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"],
    "name": {
        "familyName": "TryAddClaims",
        "givenName": "rest11@test.com"
    },
    "userName": "rest11@test.com",
    "password": "admin",
    "emails": [{
            "primary": true,
            "value": "rest11@test.com",
            "type": "home"
        }
    ],
    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User":{
        "organization": "rest_organization",
        "inn": "inn"
    }
}

回复：

{
    "emails": [
        {
            "type": "home",
            "value": "rest11@test.com"
        },
        "rest11@test.com"
    ],
    "meta": {
        "created": "2022-09-12T07:43:20.474255Z",
        "location": "my-host/scim2/Users/1d64942c-ce24-48cf-ad47-665f4f9c37f8",
        "lastModified": "2022-09-12T07:43:20.474255Z",
        "resourceType": "User"
    },
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User",
        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
    ],
    "roles": [
        {
            "type": "default",
            "value": "Internal/everyone"
        },
        {
            "display": "everyone"
        }
    ],
    "name": {
        "givenName": "rest11@test.com",
        "familyName": "TryAddClaims"
    },
    "id": "1d64942c-ce24-48cf-ad47-665f4f9c37f8",
    "userName": "rest11@test.com",
    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
        "organization": "rest_organization"
    }
}

为什么 inn 没有出现在响应中，但存在具有相同配置的组织？ 在 wso2 管理面板中，该用户也为空。

Answer 1

似乎您错过了将属性定义添加到位于 <IS_HOME>/repository/conf/ 文件夹中的 scim2-schema-extension.config 文件。

Check Add an Attribute Definition section in https://medium.com/p/71621f62c5d3 or Refer to the official documentation: https://is.docs.wso2.com/en/5.9.0/develop/extending-scim2-user -schemas/#extending-the-scim-20-api