Issues with Microsoft Entra sending incorrect PATCH operations

[ccoors]

This is basically just a heads-up, apparently Microsoft recently introduced a change to their SCIM Client in Entra that violates RFC 7644 and breaks stuff. We encountered this bug in production.

I have asked a question at Microsoft Q&A, further explaining the details: https://learn.microsoft.com/en-us/answers/questions/5524268/entra-scim-provisioning-sends-invalid-patch-reques

We could technically add a workaround for this behavior, but I'm not sure that's a good idea. What do you think?

[azmeuk]

I think this is hard to avoid providers that do not respect precisely the standards and do things their own way.
Maybe widespread non standard behaviors could be options that users can opt-in.
For instance, we could define a SCIMConfig pydantic-settings object, with options to enable support this behavior, PatchOperation.op case insensitivity etc. (I am not sure this should be one or two different options though).