DateTime SCIM 2.0 attribute mappings

DateTime System for Cross-domain Identity Management (SCIM) 2.0 attribute mappings can be used for cases in which the SCIM attribute has a value that is a JavaScript Object Notation (JSON) string or an array of JSON strings representing timestamps in the ISO 8601 format described in RFC 3339.

The corresponding LDAP attribute has values in the generalized time format. The values will be transformed as appropriate when converting between the LDAP and SCIM 2.0 representations.

Additional configuration properties that are available for DateTime SCIM 2.0 attribute mappings include:

ldap-attribute-name: The name of the LDAP attribute (in the mapped representation of the source entry generated by the sync class) whose values will be used as the values of the SCIM 2.0 attribute. This is required, and the LDAP attribute must have values that can be parsed using the generalized time syntax.
single-valued: Indicates whether the SCIM 2.0 attribute is single-valued or multivalued. If this is true, then the SCIM 2.0 representation of the attribute value will be as a JSON string. If this is false, then the SCIM 2.0 representation of the attribute value will be as a JSON array of strings.

You can use the following example configuration change to create a DateTime SCIM 2.0 attribute mapping:

dsconfig create-scim2-attribute-mapping \
     --mapping-name "Create Time" \
     --type date-time \
     --set scim-attribute-name:created \
     --set ldap-attribute-name:createTimestamp \
     --set attribute-usage:fetch \
     --set attribute-usage:create-during-realtime-sync \
     --set attribute-usage:create-during-resync \
     --set single-valued:true

PingDirectory

DateTime SCIM 2.0 attribute mappings