exclude-attributes to specify the attributes to exclude from a
PERMIT decisions, although you cannot apply Exclude Attributes advice directly to a System for Cross-domain Identity Management (SCIM) search.
Also, do not use this advice type with SCIM modifies. Instead, use the Modify SCIM Patch advice type.
The payload for this advice is a JSON array of strings. Each string is interpreted as a JSONPath into the response body of the request being authorized. Each JSONPath can select multiple attributes in the object. The portions of the response that a JSONPath selects are removed before sending the response to the client.
The following example instructs PingDataGovernance Server
to remove the attributes
For more information about the processing of SCIM searches, see Filter Response.