litellm/tests/test_litellm/proxy/management_endpoints/scim
ryan-crabbe-berri 07dd8a7e47 fix(scim): keep team memberships when PUT /Users carries no groups
Okta sends profile updates as full PUTs with no groups or groups: [], since SCIM User.groups is readOnly and membership is synced through /Groups. The PUT handler diffed that empty list against the stored teams, removed the user from every team (which also deletes their team keys) and recomputed the role from an empty group list. Treat an empty groups list on PUT as unspecified: keep the stored teams and leave the role alone. Explicit non-empty groups still replace memberships as before

Claude-Session: https://claude.ai/code/session_01CqwUV4Ywnu5aUjXx1UhJrM
2026-09-03 16:22:13 -07:00
..
test_scim_key_deactivation.py fix(scim): preserve scim_active on PUT when client omits the field 2026-05-02 04:15:25 +00:00
test_scim_patch_user.py fix(scim): parse membership id from filtered PATCH path when value omitted (#34181) 2026-07-22 22:15:37 +00:00
test_scim_transformations.py fix(scim): return user_id as Group members[].value on transformed group responses (#38161) 2026-08-25 13:37:45 -07:00
test_scim_v2_discovery.py fix(scim): stop provisioning nested group ids as internal users (#34997) 2026-07-29 09:38:17 -07:00
test_scim_v2_endpoints.py fix(scim): keep team memberships when PUT /Users carries no groups 2026-09-03 16:22:13 -07:00