Clarification about readOnly attributes about scimd

[leodido]

That thread is 2013 ... Referring to SCIM v1 ?

[alelb]

You're right, it's referring to SCIM v1, but I remain in doubt concerns readOnly attributes.
In the case of non-core attributes, the client can or cannot directly set a readOnly property? If it cannot do that, the readOnly properties are just "computed" attributes?

[leogr]

I think this question is wrong.

readOnly The attribute SHALL NOT be modified.
Simply It means that scim client cannot modify those values, so HTTP API must ti handle that as RFC mandates:
For example, in a SCIM PUT request,
"readOnly" attributes are ignored, while "readWrite" attributes are
updated. There is no need for a SCIM client to discover which
attributes are "readOnly", and the client does not need to remove
them from a PUT request in order to be accepted.

That's It.

Buy what you want it's different, check out this:

immutable The attribute MAY be defined at resource creation
(e.g., POST) or at record replacement via a request (e.g., a
PUT). The attribute SHALL NOT be updated.

https://tools.ietf.org/html/rfc7643#section-7

[alelb]

According to rfc, I suppose that the readOnly attributes are setted from the service provider.
So I'll close this discussion.
Tnk!