members.value is not allowed request on Genesys Cloud SCIM Endpoint

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

Genesys Pure Cloud SCIM endpoint does not allow `members.value` to be requested directly in groups. During synchronization or attribute mapping, the endpoint returns an error or restriction indicating that this specific attribute cannot be queried in the standard manner, preventing the correct retrieval or management of group memberships.

 

Environment

CA Identity Suite / Identity Manager (IM) 15 and below

Cause

The default Broadcom SCIM connector adheres strictly to the RFC standard, which includes "members.value" as a standard attribute. The Genesys Pure Cloud SCIM endpoint imposes custom restrictions that deviate from the standard RFC implementation, causing a mismatch when the connector attempts to perform member lookups.

Resolution

Development has confirmed that the default SCIM connector will not be modified to accommodate these specific endpoint restrictions, as it must maintain adherence to the RFC standard. 

To resolve the restriction for the Genesys Cloud endpoint, use an operational binding script to handle the "members.value" lookup. This script can be configured to bypass the default lookup behavior and accommodate the specific requirements of the Genesys SCIM implementation. 

Additional Information

If assistance is required for script development, customers are advised to contact Professional Services.