Hi, when testing our SCIM server implementation with the Okta SCIM 2.0 SPEC Test, there’s one assertion failing in the step which tests the unauthorized request response.
It seems that there’s a bug in the assertion which I guess was meant to check if the response body has the proper schema urn:ietf:params:scim:api:messages:2.0:Error
, but it assumes that schemas
is a single value, when according to the SCIM spec it’s always a list:
When I fill the Property field with schemas
, the “has value” operator is applied to this list instead of the whole body and then the test passes.
It can be easily spotted in the script when you search for "property": ""
in the script file:
https://developer.okta.com/standards/SCIM/SCIMFiles/Okta-SCIM-20-SPEC-Test.json
It should be changed to "property": "schemas"
as it is in other schema assertions.