Issues

• Decide whether upper response time limits apply to AL actions mapped to SCIM requests

  openid/ipsie-scim-al#26 · Filter by author Zollnerd opened on Jul 8, 2026

• To-do: define AL actions and map them to specific SCIM protocol requests

  openid/ipsie-scim-al#25 · Filter by author Zollnerd opened on Jul 8, 2026

• Remove the 5 minute revocation requirement on line 143

  openid/ipsie-scim-al#24 · Filter by author Zollnerd opened on Jul 8, 2026

• Move the 5 minute propagation requirement to the IPSIE Account Lifecycle spec

  openid/ipsie-scim-al#23 · Filter by author Zollnerd opened on Jul 8, 2026

• Decide whether or not be explicit about content type

  openid/ipsie-scim-al#17 · Filter by author jischr opened on May 22, 2026

• Remove "Application MUST allow the creation of a new user with the same username."

  openid/ipsie-scim-al#16 · Filter by author jischr opened on May 22, 2026

• Caveats to "must allow reactivation of a deactivated user" requirement

  openid/ipsie-scim-al#12 · Filter by author Zollnerd opened on Feb 17, 2026

• OAuth requirements unclear

  openid/ipsie-scim-al#11 · Filter by author Zollnerd opened on Feb 17, 2026
  1

• Requirement for IDP to deactivate within X minutes

  openid/ipsie-scim-al#10 · Filter by author Zollnerd opened on Feb 17, 2026
  1

• Require JWT Bearer Assertion + DPoP in future (maybe not at AL1)

  openid/ipsie-scim-al#9 · Filter by author Zollnerd opened on Feb 9, 2026
  1

• Does AL1 need a requirement to support groups?

  openid/ipsie-scim-al#5 · Filter by author Zollnerd opened on Feb 9, 2026
  3

• Requirement for "scim" scope in access token

  openid/ipsie-scim-al#3 · Filter by author Zollnerd opened on Feb 9, 2026
  1