7.3.5. Limitations

Important

The Nubus SCIM Server is in an early state with limited configuration capability. For detailed limitations, see Limitations.

This section outlines the current limitations and considerations when using the Nubus SCIM Server.

General API Limitations

• Unsupported PATCH Operation endpoints in initial versions.

• Only one externalId value per object, no multi-tenant support.

Authentication and Authorization

• No support for fine-grained authorization policies.

7.3.5.1. Data model

Limitations on the data mapping between UDM and SCIM.

• The Nubus SCIM Server doesn’t return the groups property on user objects, because of its computing-extensive evaluation.

• Fixed attribute mapping, not customizable through configuration.

7.3.5.2. Performance

Performance limitations when running on large UDM datasets.

• GET /{uuid} endpoint performance is suboptimal for Groups.

• Large datasets may take a while, because of no pagination support yet. However, support for manually limiting the number of results is available.

7.3.5.3. Operational

Limitations on operating the Nubus SCIM Server.

Monitoring and Observability

• Limited built-in monitoring capabilities.

• Basic logging available through configurable log level.

• No detailed performance metrics.

Data Validation

• No validation of email format or phone number format.

• No validation of address components.

• No validation of TLS certificates.

Group member mapping

Read operations: UDM → SCIM

If the SCIM server couldn’t find a member’s reference in UDM, it silently ignores it and doesn’t map the reference to SCIM.

Write operations: SCIM → UDM

If the SCIM server couldn’t find a member’s reference in UDM, the write operation fails with an HTTP error 422.