PH24423: WITH SCIM-1.0 FEATURE AND LDAP REGISTRY, SCIM QUERIES FOR GROUP MEMBERS DO NOT DELIVER THE DISPLAY NAME FOR GROUP MEMBERS.

APAR status

• Closed as program error.

Error description

• If you have a federated registry with LDAP that contains a
  group that contains nested groups, by default the cn is used
  as
  display name for groups.
  
  However, when you query the members
  of a nested group, you only get the "display" attribute for
  the
  users, not for the contained groups.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty using SCIM                   *
  ****************************************************************
  * PROBLEM DESCRIPTION: When returning group members in SCIM,   *
  *                      the members do not show a display       *
  *                      attribute.                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  SCIM is not retrieving all the necessary attributes when
  searching for group members. Thus, the display attribute is not
  populating.
  

Problem conclusion

• SCIM is now populating group members with the display attribute
  where applicable.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 20.0.0.6.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels