Question (jans-scim): Password deleted on SCIM PUT

[aguskwee]

Hi,

I am currently using Janssen v1.1.6 and encountered one issue on jans scim.
Currently, I am using jans scim endpoint to make changes to users information.

Here is the scenario.

1. I created a user with a password using POST method on jans scim endpoint
2. I update user display name using PUT method on jans scim endpoint
3. After it is successfully updated the user, the password is removed (set to null)

Can anyone help on how to go around this issue?
For you info, if I switched back to v1.1.5, it works as expected.

Regards,
Agus

[mzico]

@aguskwee : anything in scim log? may be in TRACE mode?

[aguskwee]

yes, i can see in the scim logs. It set userPassword to null even though I didn't provide the userPassword in the request payload.

[nynymike]

Hi Agus. I'm not sure that's a bug. To update only one user attribute, you should use PATCH and not PUT (which replaces the whole entry). If you use PUT, you most provide all the claims.

[aguskwee]

Hi Mike,
I also tried the Patch method. It also behaves the same. userPassword was deleted.

[nynymike]

As the current version is 1.4.0, can you try with that version? We're not going to patch version 1.1.6

[mmrraju]

Hey @aguskwee yes you can use current version 1.4.0, I've tested the PATCH, PUT both methods, no effect on userPassword.

[aguskwee]

ok, great. will test it later..

Thanks.