Skip to content

SCIM Entra ID support#28832

Merged
getvictor merged 13 commits intomainfrom
victor/28196-scim-entra-id
May 8, 2025
Merged

SCIM Entra ID support#28832
getvictor merged 13 commits intomainfrom
victor/28196-scim-entra-id

Conversation

@getvictor
Copy link
Copy Markdown
Member

@getvictor getvictor commented May 5, 2025

For #28196

This PR adds full patching for SCIM Users and Groups, and adds the ability to filter Groups by displayName.

The changes have been tested with Entra ID SCIM Validator and Okta SCIM 2.0 SPEC Test (to make sure we didn't break Okta).

Checklist for submitter

  • Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
  • Added/updated automated tests
  • A detailed QA plan exists on the associated ticket (if it isn't there, work with the product group's QA engineer to add it)
  • Manual QA for all new/changed functionality

@codecov
Copy link
Copy Markdown

codecov Bot commented May 5, 2025

Codecov Report

Attention: Patch coverage is 60.73944% with 223 lines in your changes missing coverage. Please review.

Project coverage is 64.20%. Comparing base (55bacd8) to head (67dfd91).
Report is 34 commits behind head on main.

Files with missing lines Patch % Lines
ee/server/scim/groups.go 52.45% 93 Missing and 23 partials ⚠️
ee/server/scim/users.go 58.60% 68 Missing and 21 partials ⚠️
server/datastore/mysql/scim.go 80.21% 12 Missing and 6 partials ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main   #28832      +/-   ##
==========================================
+ Coverage   64.16%   64.20%   +0.04%     
==========================================
  Files        1815     1816       +1     
  Lines      174346   175865    +1519     
  Branches     5118     5118              
==========================================
+ Hits       111867   112915    +1048     
- Misses      53696    54082     +386     
- Partials     8783     8868      +85     
Flag Coverage Δ
backend 65.21% <60.73%> (+0.03%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@getvictor getvictor marked this pull request as ready for review May 6, 2025 22:38
@getvictor getvictor requested review from a team and lukeheath as code owners May 6, 2025 22:38
@getvictor getvictor moved this to 🦤 ‎In review in 💻 #g-mdm May 8, 2025
Copy link
Copy Markdown
Member

@lukeheath lukeheath left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving contributor doc changes, not code changes.

Copy link
Copy Markdown
Contributor

@gillespi314 gillespi314 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks for all the tests :)

@getvictor getvictor merged commit 6f9030e into main May 8, 2025
41 checks passed
@getvictor getvictor deleted the victor/28196-scim-entra-id branch May 8, 2025 18:02
@github-project-automation github-project-automation Bot moved this from 🦤 ‎In review to Done in 💻 #g-mdm May 8, 2025
getvictor added a commit that referenced this pull request May 8, 2025
For #28196

This PR depends on PR #28832

This PR adds support for excludeAttributes=members, which is being used
by Microsoft Entra ID.

This PR modifies the primary key of host_scim_user table to be host_id.
This should have been done initially and has added accidental complexity
and maintainability challenges, so we are doing it now. This means a
host can have a maximum of 1 SCIM user associated with it. A SCIM user,
on the other hand, can be associated with multiple hosts.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
@georgekarrv georgekarrv added this to the 4.69.0 milestone Jul 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

4 participants