GLUU client does not have permission for SCIM requests
<p>I have a client that is making a <a href="https://www.gluu.org/docs/api/scim-1.1/" rel="nofollow">getUser</a> SCIM request. It successfully can get an access token and RPT, however when it actually comes to the getUser request, I get a response with the status '403 Forbidden' with a ticket as the body of the response. According to this <a href="https://docs.kantarainitiative.org/uma/draft-uma-core.html#ticket-management" rel="nofollow">UMA document</a> a permission ticket indicates the request was valid, but the client does not have permission. I have tried everything I can think of to give this client permissions, but havent managed to get it working.</p>

<p>Does anyone know how to give a client permissions to do SCIM requests?</p>

<p>My current method of attempting a request is:</p>

<ol>
<li><p>Get access token using client credentials</p></li>
<li><p>Get RPT using access token acquired in step 1 as authorization</p></li>
<li><p>make domain.com/identity/seam/resource/restv1/scim/v1/Users request using RPT as authorization</p></li>
<li><p>Follow the <a href="https://docs.kantarainitiative.org/uma/rec-uma-core.html#seek-authorization" rel="nofollow">seek authorization steps</a> of sending request to RPT endpoint with ticket and old RPT. This replies with a new RPT.</p></li>
<li><p>Attempt step 3 again using the RPT from step 4 as authorization</p></li>
</ol>

<p>Any advice would be appreciated.</p>