-
Notifications
You must be signed in to change notification settings - Fork 148
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Deploy broken in v7.23.0: SCIM support for connection management requires read:scim_config scope or update to excluded_props #924
Comments
We're getting the very same issue here, our pipelines broke today. To add some information, just worth mentioning that, while investigating, we added the scope
In the meantime we're trying to pin to the previous working version, 7.22.1, but would be nice to have feedback on this one. Thanks! |
I added Thanks! |
Hello @bweisberger, Thanks for your patience. I am looking into this issue. |
We also ran into issues, where our deploy is suddenly taking 10X longer , since there's now a call for every enterprise connection. Build time went from 1m 58s to 11m 8s . We also are seeing our builds fail now with a 524 error, retrying works, but we didn't see errors like this until v7.23.0. 2024-07-26T19:41:44.091Z - warn: SCIM configuration is not enabled on connection "con_YLzAe8C8VNUGKfzn". |
Hi @kschmi-icims, The current version If SCIM is not in use on any of your connections, you can temporarily remove the We plan to release another minor version by the end of this week, which should reduce SCIM-related delays, though it may not completely eliminate them. And regarding |
Hi @nandan-bhat , we aren't using SCIM, we worked around the issue by disabling connection updates. Appreciate the upcoming patch to reduce delays. The 524 errors were not consistent, we've seen them before under heavy load Auth0 Mgmt APIs can sometimes return a 524, the issue is the entire deploy cli run would fail and we'd have to start over. |
Hi @kschmi-icims, Thank you! |
Checklist
Description
We successfully deployed as recently as two days ago, but suddenly our deploys are breaking with the following error:
error: SCIM request failed with statusCode 403 (insufficient_scope). Insufficient scope, expected any of: read:scim_config.
Looking at the auth0-deploy-cli repo, I can see this PR to add SCIM configuration management was merged yesterday.
We do use the a0deploy cli tool to manage our connections. Our deploy script installs the package without pinning a version, so I'm assuming it is installing the latest version:
We don't have the
read:scim_config
permission enabled for our Auth0 Deploy CLI client in Auth0, and we don't have theconnections.scim_configuration
property in our excluded props. I'm reasoning we shouldn't have to make a code change without a major version update.Thanks for your help!
Expectation
Installing the latest minor version of the auth0-deploy-cli package should not require code updates or cause deploys to fail.
Reproduction
read:scim_config
scope, andconnections.scim_configuration
is not an excluded propread:scim_config
scope is required.Deploy CLI version
7.23.0
Node version
16.20.2
The text was updated successfully, but these errors were encountered: