Skip to content

SCIM Groups API limits group members in request/response #2784

@spwitt

Description

@spwitt

SCIM Groups API limits group members in request/response

Description

The SCIM API endpoints to create, patch, and retrieve a group do not properly handle group membership counts over 100 users. Responses only return the first 100 users. The patch request will remove group members if the group contains over 100 users.

Observed versions

1.51.0

Affects versions

>= 1.36.0

Steps to reproduce

  1. Create 100+ users
  2. Create a Group
  3. Add users to the group
  4. Send a SCIM patch request to add another user to the group
  5. Only 100 users are members of the group after patch completes

Expected behavior

All group members should be retrieved during a SCIM request. SCIM patch requests to add group members should not remove group members.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

Additional context

Add any other context about the problem here.

Metadata

Metadata

Labels

SCIMbugSomething isn't working

Type

No type

Projects

Status

Delivered

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions