PingDirectory

SCIM 2.0 searches

You can cap the total number of resources that are matched by a search to prevent exhausting server resources.

The configuration for each System for Cross-domain Identity Management (SCIM) 2.0 resource type contains a lookthrough-limit property that defines this limit. The default lookthrough-limit value is 500.

If a search request exceeds the lookthrough limit, the client receives a 400 response with an error message similar to the following:

{
    "detail": "The search request matched too many results",
    "schemas": ["urn:ietf:params:scim:api:messages:2.0:Error"],
    "scimType": "tooMany",
    "status": "400"
}

To prevent this error:

  • The client must refine its search filter to return fewer matches.

  • You should configure paged searches as shown in Using paged SCIM searches.