SCIM - Disabled users error

[Speed1]

Debug mode

• I have enabled debug mode
• I have read checked the Common Issues page

Describe the bug

Hi,

we have some users that are provisioned via Azure Active Directory SCIM. If one of these users gets disabled, because he leaves the company, the provisioning throws an error message:

as soon I enable the scim log via SCIM_TRACE=true in the .env file the inactive value is set correctly and the error during the provisioning disappears and everything works correctly.

Let me know if you need further info.

Reproduction steps

1. Provision a user via Azure Active Directory SCIM
2. Disable the user in the source System
3. Wait until the next provisioning cycle will occur
4. The provisioning Log will throw an error for this user (see screenshot above)
5. Enable SCIM logging via SCIM_TRACE=true
6. The next provisioning cycle will apply the operation on the user without error

Expected behavior

This should work without enabling the SCIM_TRACE=true in the .env file

Screenshots

No response

Snipe-IT Version

6.3.4

Operating System

Red Hat

Web Server

Apache

PHP Version

7.4.33

Operating System

No response

Browser

No response

Version

No response

Device

No response

Operating System

No response

Browser

No response

Version

No response

Error messages

No response

Additional context

No response

[uberbrady]

Because of the 'method Not Allowed' message up there, I'm wondering if you've left the DELETE verb enabled - we don't support that (because the underlying library doesn't, and even if it did, I don't know that we would be able to - you shouldn't be able to delete a user who has assets assigned to them, or anything else pointing at them)

[Speed1]

Hi Brady,

sorry for the late reply, I totally forgot about this issue.
We have the DELETE verb not enabled, only CREATE and UPDATE

Best
Alex

[dtjn]

Encountered the exact same behaviour this week. @Speed1 does the "Login Enabled" attribute actually get set to false after enabling "SCIM_TRACE=true" in the .env? In our case this leads to SCIM provisioning not complaining anymore and reporting everything as working as expected on Azure Application side, but users still have "This user can login" set when looking at them in the Snipe-IT GUI.

[Speed1]

Hi @dtjn,

We noticed the same behavior. We didn’t observe any changes in the user’s status in SnipeIT. The “This user can login” remains consistently active.

Best,
Alex