为什么 Azure 将 400(错误请求)响应视为提供程序中的 SCIM 实现错误?

Why Azure treating 400 (Bad request) response as SCIM implementation error in provider?

审计日志:

我已根据 scim 规范选择不删除组 https://www.rfc-editor.org/rfc/rfc7644#section-3.6

Clients request resource removal via DELETE. Service providers MAY choose not to permanently delete the resource

但是 Azure 将其视为错误,下面是我在审核日志中看到的内容,我是否正确理解了规范,还是我遗漏了什么?

Failed to delete Group '' in customappsso; Error: The SCIM endpoint is not fully compatible with the Azure Active Directory SCIM client. Please refer to the Azure Active Directory SCIM provisioning documentation and adapt the SCIM endpoint to be able to process provisioning requests from Azure Active Directory. StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details. Web Response: {"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"detail":"DELETE group not supported","status":null,"scimType":"mutability"}. This operation was retried 0 times. It will be retried again after this date: 2020-03-16T17:42:08.0940986Z UTC

如果您取消选中属性映射中的删除,则不应出现该错误。您说得对,不需要实施删除端点。

https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/customize-application-attributes#editing-user-attribute-mappings