Will a request to /Users or /Groups return 404 if it doesn't have the right token ?

Forum|Forum|3 years ago
June 16, 2023
3 replies
236 views

Hi, we're developing an integration that leverages 1password SCIM bridge.

Our integration gets the OAuth token from our customer, and then makes a request to https://{domain}/Groups and https://{domain}/Users.

Both of these requests (and also with {domain}/scim/Users and {domain}/scim/Groups) are returning 404.

Could it be the case that the token is wrong ? We would expect a 401/413/etc error if that was the case rather than a 404.

Also, is there any configuration that our customer could have changed so that these are not the right endpoints ? Any common missing configurations or checks we could have them do to confirm that these endpoints should be accesible?

Thanks in advance!

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

SCIM

hemal_g_1p

1Password Employee

Hey there,

Thanks for writing in and we apologize for late response on this thread.
We would need some more details and context to better understand your usecase. Feel free to write us at businesssupport@1password.com and our integration-support can help you.

A

Anonymous

I believe the service does return a 404 when the bearer token is invalid. My own experiments today seem to prove that out.

If you put "Bearer :" in your authorization header, you'll also be sad.

As well, the server does not use the /v2 prefix in the url from the SCIM standard. That is to say

curl -v -H "authorization: ${API_KEY}" https://example.scim.service/Users%5C?startIndex%5C=1%5C&count%5C=2

Is a working command that returns output.

hemal_g_1p

1Password Employee

Glad to know you figured out solution. Thanks for sharing experience with us.

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded