rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add SCIM management

Browse Source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2026-01-04 19:03:00 +01:00
parent b6799cbb01
commit cfc514c8e0
405 changed files with 4888 additions and 88927 deletions
Download Patch File Download Diff File Expand all files Collapse all files

108
pkg/server/api/connect/v1/schema.graphql
View File

@@ -123,6 +123,16 @@ type Mutation {
deleteSAMLConfiguration(
input: DeleteSAMLConfigurationInput!
): DeleteSAMLConfigurationPayload @session(required: PRESENT)
createSCIMConfiguration(
input: CreateSCIMConfigurationInput!
): CreateSCIMConfigurationPayload @session(required: PRESENT)
deleteSCIMConfiguration(
input: DeleteSCIMConfigurationInput!
): DeleteSCIMConfigurationPayload @session(required: PRESENT)
regenerateSCIMToken(
input: RegenerateSCIMTokenInput!
): RegenerateSCIMTokenPayload @session(required: PRESENT)
}
type Identity implements Node {
@@ -216,6 +226,8 @@ type Organization implements Node {
before: CursorKey
): SAMLConfigurationConnection @goField(forceResolver: true)
scimConfiguration: SCIMConfiguration @goField(forceResolver: true)
viewerMembership: Membership @goField(forceResolver: true)
permission(action: String!): Boolean!
@@ -239,6 +251,7 @@ enum MembershipSource
MANUAL
@goEnum(value: "go.probo.inc/probo/pkg/coredata.MembershipSourceManual")
SAML @goEnum(value: "go.probo.inc/probo/pkg/coredata.MembershipSourceSAML")
SCIM @goEnum(value: "go.probo.inc/probo/pkg/coredata.MembershipSourceSCIM")
}
type Membership implements Node {
@@ -333,6 +346,43 @@ type SSOAvailability {
organizationId: ID
}
type SCIMConfiguration implements Node {
id: ID!
endpointUrl: String! @goField(forceResolver: true)
createdAt: Datetime!
updatedAt: Datetime!
organization: Organization @goField(forceResolver: true)
events(
first: Int
after: CursorKey
last: Int
before: CursorKey
orderBy: SCIMEventOrder
): SCIMEventConnection @goField(forceResolver: true)
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
}
type SCIMEvent implements Node {
id: ID!
method: String!
path: String!
statusCode: Int!
requestBody: String
responseBody: String
errorMessage: String
membership: Membership @goField(forceResolver: true)
ipAddress: String!
createdAt: Datetime!
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
}
enum InvitationStatus
@goModel(model: "go.probo.inc/probo/pkg/coredata.InvitationStatus") {
PENDING
@@ -478,6 +528,36 @@ type SAMLConfigurationEdge {
cursor: CursorKey!
}
enum SCIMEventOrderField
@goModel(model: "go.probo.inc/probo/pkg/coredata.SCIMEventOrderField") {
CREATED_AT
@goEnum(
value: "go.probo.inc/probo/pkg/coredata.SCIMEventOrderFieldCreatedAt"
)
}
input SCIMEventOrder
@goModel(
model: "go.probo.inc/probo/pkg/server/api/connect/v1/types.SCIMEventOrderBy"
) {
direction: OrderDirection!
field: SCIMEventOrderField!
}
type SCIMEventConnection
@goModel(
model: "go.probo.inc/probo/pkg/server/api/connect/v1/types.SCIMEventConnection"
) {
edges: [SCIMEventEdge!]!
pageInfo: PageInfo!
totalCount: Int @goField(forceResolver: true)
}
type SCIMEventEdge {
node: SCIMEvent!
cursor: CursorKey!
}
type PageInfo {
hasNextPage: Boolean!
hasPreviousPage: Boolean!
@@ -752,3 +832,31 @@ type UpdateSAMLConfigurationPayload {
type DeleteSAMLConfigurationPayload {
deletedSamlConfigurationId: ID!
}
input CreateSCIMConfigurationInput {
organizationId: ID!
}
input DeleteSCIMConfigurationInput {
organizationId: ID!
scimConfigurationId: ID!
}
input RegenerateSCIMTokenInput {
organizationId: ID!
scimConfigurationId: ID!
}
type CreateSCIMConfigurationPayload {
scimConfiguration: SCIMConfiguration!
token: String!
}
type DeleteSCIMConfigurationPayload {
deletedScimConfigurationId: ID!
}
type RegenerateSCIMTokenPayload {
scimConfiguration: SCIMConfiguration!
token: String!
}

2690
pkg/server/api/connect/v1/schema/schema.go
View File

File diff suppressed because it is too large Load Diff

30
pkg/server/api/connect/v1/types/scim_configuration.go Normal file
View File

@@ -0,0 +1,30 @@
// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
package types
import (
"go.probo.inc/probo/pkg/coredata"
)
func NewSCIMConfiguration(scimConfiguration *coredata.SCIMConfiguration) *SCIMConfiguration {
return &SCIMConfiguration{
ID: scimConfiguration.ID,
Organization: &Organization{
ID: scimConfiguration.OrganizationID,
},
CreatedAt: scimConfiguration.CreatedAt,
UpdatedAt: scimConfiguration.UpdatedAt,
}
}

82
pkg/server/api/connect/v1/types/scim_event.go Normal file
View File

@@ -0,0 +1,82 @@
// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
package types
import (
"go.probo.inc/probo/pkg/coredata"
"go.probo.inc/probo/pkg/gid"
"go.probo.inc/probo/pkg/page"
)
type (
SCIMEventOrderBy OrderBy[coredata.SCIMEventOrderField]
SCIMEventConnection struct {
TotalCount int
Edges []*SCIMEventEdge
PageInfo PageInfo
Resolver any
ParentID gid.GID
}
)
func NewSCIMEventConnection(
p *page.Page[*coredata.SCIMEvent, coredata.SCIMEventOrderField],
resolver any,
parentID gid.GID,
) *SCIMEventConnection {
edges := make([]*SCIMEventEdge, len(p.Data))
for i, scimEvent := range p.Data {
edges[i] = NewSCIMEventEdge(scimEvent, p.Cursor.OrderBy.Field)
}
return &SCIMEventConnection{
Edges: edges,
PageInfo: *NewPageInfo(p),
Resolver: resolver,
ParentID: parentID,
}
}
func NewSCIMEventEdge(scimEvent *coredata.SCIMEvent, orderField coredata.SCIMEventOrderField) *SCIMEventEdge {
return &SCIMEventEdge{
Node: NewSCIMEvent(scimEvent),
Cursor: scimEvent.CursorKey(orderField),
}
}
func NewSCIMEvent(scimEvent *coredata.SCIMEvent) *SCIMEvent {
event := &SCIMEvent{
ID: scimEvent.ID,
Method: scimEvent.Method,
Path: scimEvent.Path,
StatusCode: scimEvent.StatusCode,
RequestBody: scimEvent.RequestBody,
ResponseBody: scimEvent.ResponseBody,
ErrorMessage: scimEvent.ErrorMessage,
IPAddress: scimEvent.IPAddress.String(),
CreatedAt: scimEvent.CreatedAt,
}
if scimEvent.MembershipID != nil {
event.Membership = &Membership{
ID: *scimEvent.MembershipID,
}
}
return event
}

64
pkg/server/api/connect/v1/types/types.go
View File

@@ -94,6 +94,15 @@ type CreateSAMLConfigurationPayload struct {
SamlConfigurationEdge *SAMLConfigurationEdge `json:"samlConfigurationEdge"`
}
type CreateSCIMConfigurationInput struct {
OrganizationID gid.GID `json:"organizationId"`
}
type CreateSCIMConfigurationPayload struct {
ScimConfiguration *SCIMConfiguration `json:"scimConfiguration"`
Token string `json:"token"`
}
type DeleteInvitationInput struct {
OrganizationID gid.GID `json:"organizationId"`
InvitationID gid.GID `json:"invitationId"`
@@ -128,6 +137,15 @@ type DeleteSAMLConfigurationPayload struct {
DeletedSamlConfigurationID gid.GID `json:"deletedSamlConfigurationId"`
}
type DeleteSCIMConfigurationInput struct {
OrganizationID gid.GID `json:"organizationId"`
ScimConfigurationID gid.GID `json:"scimConfigurationId"`
}
type DeleteSCIMConfigurationPayload struct {
DeletedScimConfigurationID gid.GID `json:"deletedScimConfigurationId"`
}
type ForgotPasswordInput struct {
Email mail.Addr `json:"email"`
}
@@ -233,6 +251,7 @@ type Organization struct {
Members *MembershipConnection `json:"members,omitempty"`
Invitations *InvitationConnection `json:"invitations,omitempty"`
SamlConfigurations *SAMLConfigurationConnection `json:"samlConfigurations,omitempty"`
ScimConfiguration *SCIMConfiguration `json:"scimConfiguration,omitempty"`
ViewerMembership *Membership `json:"viewerMembership,omitempty"`
Permission bool `json:"permission"`
}
@@ -280,6 +299,16 @@ type PersonalAPIKeyEdge struct {
type Query struct {
}
type RegenerateSCIMTokenInput struct {
OrganizationID gid.GID `json:"organizationId"`
ScimConfigurationID gid.GID `json:"scimConfigurationId"`
}
type RegenerateSCIMTokenPayload struct {
ScimConfiguration *SCIMConfiguration `json:"scimConfiguration"`
Token string `json:"token"`
}
type RemoveMemberInput struct {
OrganizationID gid.GID `json:"organizationId"`
MembershipID gid.GID `json:"membershipId"`
@@ -364,6 +393,41 @@ type SAMLConfigurationEdge struct {
Cursor page.CursorKey `json:"cursor"`
}
type SCIMConfiguration struct {
ID gid.GID `json:"id"`
EndpointURL string `json:"endpointUrl"`
CreatedAt time.Time `json:"createdAt"`
UpdatedAt time.Time `json:"updatedAt"`
Organization *Organization `json:"organization,omitempty"`
Events *SCIMEventConnection `json:"events,omitempty"`
Permission bool `json:"permission"`
}
func (SCIMConfiguration) IsNode() {}
func (this SCIMConfiguration) GetID() gid.GID { return this.ID }
type SCIMEvent struct {
ID gid.GID `json:"id"`
Method string `json:"method"`
Path string `json:"path"`
StatusCode int `json:"statusCode"`
RequestBody *string `json:"requestBody,omitempty"`
ResponseBody *string `json:"responseBody,omitempty"`
ErrorMessage *string `json:"errorMessage,omitempty"`
Membership *Membership `json:"membership,omitempty"`
IPAddress string `json:"ipAddress"`
CreatedAt time.Time `json:"createdAt"`
Permission bool `json:"permission"`
}
func (SCIMEvent) IsNode() {}
func (this SCIMEvent) GetID() gid.GID { return this.ID }
type SCIMEventEdge struct {
Node *SCIMEvent `json:"node"`
Cursor page.CursorKey `json:"cursor"`
}
type SSOAvailability struct {
Available bool `json:"available"`
SamlConfigID *gid.GID `json:"samlConfigId,omitempty"`

226
pkg/server/api/connect/v1/v1_resolver.go
View File

@@ -1090,6 +1090,57 @@ func (r *mutationResolver) DeleteSAMLConfiguration(ctx context.Context, input ty
return &types.DeleteSAMLConfigurationPayload{DeletedSamlConfigurationID: input.SamlConfigurationID}, nil
}
// CreateSCIMConfiguration is the resolver for the createSCIMConfiguration field.
func (r *mutationResolver) CreateSCIMConfiguration(ctx context.Context, input types.CreateSCIMConfigurationInput) (*types.CreateSCIMConfigurationPayload, error) {
if ok := r.Authorize(ctx, input.OrganizationID, iam.ActionSCIMConfigurationCreate, nil); !ok {
return nil, nil
}
config, token, err := r.iam.OrganizationService.CreateSCIMConfiguration(ctx, input.OrganizationID)
if err != nil {
r.logger.ErrorCtx(ctx, "cannot create scim configuration", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return &types.CreateSCIMConfigurationPayload{
ScimConfiguration: types.NewSCIMConfiguration(config),
Token: token,
}, nil
}
// DeleteSCIMConfiguration is the resolver for the deleteSCIMConfiguration field.
func (r *mutationResolver) DeleteSCIMConfiguration(ctx context.Context, input types.DeleteSCIMConfigurationInput) (*types.DeleteSCIMConfigurationPayload, error) {
if ok := r.Authorize(ctx, input.OrganizationID, iam.ActionSCIMConfigurationDelete, nil); !ok {
return nil, nil
}
err := r.iam.OrganizationService.DeleteSCIMConfiguration(ctx, input.OrganizationID, input.ScimConfigurationID)
if err != nil {
r.logger.ErrorCtx(ctx, "cannot delete scim configuration", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return &types.DeleteSCIMConfigurationPayload{DeletedScimConfigurationID: input.ScimConfigurationID}, nil
}
// RegenerateSCIMToken is the resolver for the regenerateSCIMToken field.
func (r *mutationResolver) RegenerateSCIMToken(ctx context.Context, input types.RegenerateSCIMTokenInput) (*types.RegenerateSCIMTokenPayload, error) {
if ok := r.Authorize(ctx, input.ScimConfigurationID, iam.ActionSCIMConfigurationUpdate, nil); !ok {
return nil, nil
}
config, token, err := r.iam.OrganizationService.RegenerateSCIMToken(ctx, input.OrganizationID, input.ScimConfigurationID)
if err != nil {
r.logger.ErrorCtx(ctx, "cannot regenerate scim token", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return &types.RegenerateSCIMTokenPayload{
ScimConfiguration: types.NewSCIMConfiguration(config),
Token: token,
}, nil
}
// LogoURL is the resolver for the logoUrl field.
func (r *organizationResolver) LogoURL(ctx context.Context, obj *types.Organization) (*string, error) {
if ok := r.Authorize(ctx, obj.ID, iam.ActionOrganizationGet, nil); !ok {
@@ -1216,6 +1267,26 @@ func (r *organizationResolver) SamlConfigurations(ctx context.Context, obj *type
return types.NewSAMLConfigurationConnection(page, r, obj.ID), nil
}
// ScimConfiguration is the resolver for the scimConfiguration field.
func (r *organizationResolver) ScimConfiguration(ctx context.Context, obj *types.Organization) (*types.SCIMConfiguration, error) {
if ok := r.Authorize(ctx, obj.ID, iam.ActionSCIMConfigurationGet, nil); !ok {
return nil, nil
}
config, err := r.iam.OrganizationService.GetSCIMConfiguration(ctx, obj.ID)
if err != nil {
var notFound *iam.ErrNoSCIMConfigurationFound
if errors.As(err, &notFound) {
return nil, nil
}
r.logger.ErrorCtx(ctx, "cannot get scim configuration", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return types.NewSCIMConfiguration(config), nil
}
// ViewerMembership is the resolver for the viewerMembership field.
func (r *organizationResolver) ViewerMembership(ctx context.Context, obj *types.Organization) (*types.Membership, error) {
if ok := r.Authorize(ctx, obj.ID, iam.ActionMembershipList, nil); !ok {
@@ -1358,6 +1429,24 @@ func (r *queryResolver) Node(ctx context.Context, id gid.GID) (types.Node, error
}
return types.NewPersonalAPIKey(personalAPIKey), nil
}
case coredata.SCIMConfigurationEntityType:
action = iam.ActionSCIMConfigurationGet
loadNode = func(ctx context.Context, id gid.GID) (types.Node, error) {
scimConfiguration, err := r.iam.GetSCIMConfiguration(ctx, id)
if err != nil {
return nil, err
}
return types.NewSCIMConfiguration(scimConfiguration), nil
}
case coredata.SCIMEventEntityType:
action = iam.ActionSCIMEventGet
loadNode = func(ctx context.Context, id gid.GID) (types.Node, error) {
scimEvent, err := r.iam.GetSCIMEvent(ctx, id)
if err != nil {
return nil, err
}
return types.NewSCIMEvent(scimEvent), nil
}
default:
return nil, fmt.Errorf("unsupported entity type: %d", id.EntityType())
}
@@ -1452,6 +1541,127 @@ func (r *sAMLConfigurationConnectionResolver) TotalCount(ctx context.Context, ob
return nil, gqlutils.InternalServerError(ctx)
}
// EndpointURL is the resolver for the endpointUrl field.
func (r *sCIMConfigurationResolver) EndpointURL(ctx context.Context, obj *types.SCIMConfiguration) (string, error) {
return r.baseURL.WithPath("/api/connect/v1/scim/2.0").MustString(), nil
}
// Organization is the resolver for the organization field.
func (r *sCIMConfigurationResolver) Organization(ctx context.Context, obj *types.SCIMConfiguration) (*types.Organization, error) {
if ok := r.Authorize(ctx, obj.Organization.ID, iam.ActionOrganizationGet, nil); !ok {
return nil, nil
}
if obj.Organization == nil {
return nil, nil
}
if gqlutils.OnlyIDSelected(ctx) {
return &types.Organization{
ID: obj.Organization.ID,
}, nil
}
organization, err := r.iam.OrganizationService.GetOrganization(ctx, obj.Organization.ID)
if err != nil {
var errOrganizationNotFound *iam.ErrOrganizationNotFound
if errors.As(err, &errOrganizationNotFound) {
return nil, nil
}
r.logger.ErrorCtx(ctx, "cannot get organization for scim configuration", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return types.NewOrganization(organization), nil
}
// Events is the resolver for the events field.
func (r *sCIMConfigurationResolver) Events(ctx context.Context, obj *types.SCIMConfiguration, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.SCIMEventOrderBy) (*types.SCIMEventConnection, error) {
if ok := r.Authorize(ctx, obj.ID, iam.ActionSCIMEventList, nil); !ok {
return nil, nil
}
pageOrderBy := page.OrderBy[coredata.SCIMEventOrderField]{
Field: coredata.SCIMEventOrderFieldCreatedAt,
Direction: page.OrderDirectionDesc,
}
if orderBy != nil {
pageOrderBy.Field = coredata.SCIMEventOrderField(orderBy.Field)
pageOrderBy.Direction = page.OrderDirection(orderBy.Direction)
}
cursor := cursor.NewCursor(first, after, last, before, pageOrderBy)
events, err := r.iam.OrganizationService.ListSCIMEventsByConfigID(ctx, obj.ID, cursor)
if err != nil {
r.logger.ErrorCtx(ctx, "cannot list scim events", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return types.NewSCIMEventConnection(events, r, obj.ID), nil
}
// Permission is the resolver for the permission field.
func (r *sCIMConfigurationResolver) Permission(ctx context.Context, obj *types.SCIMConfiguration, action string) (bool, error) {
return r.Resolver.Permission(ctx, obj, action)
}
// Membership is the resolver for the membership field.
func (r *sCIMEventResolver) Membership(ctx context.Context, obj *types.SCIMEvent) (*types.Membership, error) {
if ok := r.Authorize(ctx, obj.Membership.ID, iam.ActionMembershipGet, nil); !ok {
return nil, nil
}
if obj.Membership == nil {
return nil, nil
}
if gqlutils.OnlyIDSelected(ctx) {
return &types.Membership{
ID: obj.Membership.ID,
}, nil
}
membership, err := r.iam.GetMembership(ctx, obj.Membership.ID)
if err != nil {
var errMembershipNotFound *iam.ErrMembershipNotFound
if errors.As(err, &errMembershipNotFound) {
return nil, nil
}
r.logger.ErrorCtx(ctx, "cannot get membership for scim event", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return types.NewMembership(membership), nil
}
// Permission is the resolver for the permission field.
func (r *sCIMEventResolver) Permission(ctx context.Context, obj *types.SCIMEvent, action string) (bool, error) {
return r.Resolver.Permission(ctx, obj, action)
}
// TotalCount is the resolver for the totalCount field.
func (r *sCIMEventConnectionResolver) TotalCount(ctx context.Context, obj *types.SCIMEventConnection) (*int, error) {
if ok := r.Authorize(ctx, obj.ParentID, iam.ActionSCIMEventList, nil); !ok {
return nil, nil
}
switch obj.Resolver.(type) {
case *sCIMConfigurationResolver:
count, err := r.iam.OrganizationService.CountSCIMEvents(ctx, obj.ParentID)
if err != nil {
r.logger.ErrorCtx(ctx, "cannot count scim events", log.Error(err))
return nil, gqlutils.InternalServerError(ctx)
}
return &count, nil
}
r.logger.ErrorCtx(ctx, "unsupported resolver", log.Any("resolver", obj.Resolver))
return nil, gqlutils.InternalServerError(ctx)
}
// Identity is the resolver for the identity field.
func (r *sessionResolver) Identity(ctx context.Context, obj *types.Session) (*types.Identity, error) {
if gqlutils.OnlyIDSelected(ctx) {
@@ -1542,6 +1752,19 @@ func (r *Resolver) SAMLConfigurationConnection() schema.SAMLConfigurationConnect
return &sAMLConfigurationConnectionResolver{r}
}
// SCIMConfiguration returns schema.SCIMConfigurationResolver implementation.
func (r *Resolver) SCIMConfiguration() schema.SCIMConfigurationResolver {
return &sCIMConfigurationResolver{r}
}
// SCIMEvent returns schema.SCIMEventResolver implementation.
func (r *Resolver) SCIMEvent() schema.SCIMEventResolver { return &sCIMEventResolver{r} }
// SCIMEventConnection returns schema.SCIMEventConnectionResolver implementation.
func (r *Resolver) SCIMEventConnection() schema.SCIMEventConnectionResolver {
return &sCIMEventConnectionResolver{r}
}
// Session returns schema.SessionResolver implementation.
func (r *Resolver) Session() schema.SessionResolver { return &sessionResolver{r} }
@@ -1563,5 +1786,8 @@ type personalAPIKeyConnectionResolver struct{ *Resolver }
type queryResolver struct{ *Resolver }
type sAMLConfigurationResolver struct{ *Resolver }
type sAMLConfigurationConnectionResolver struct{ *Resolver }
type sCIMConfigurationResolver struct{ *Resolver }
type sCIMEventResolver struct{ *Resolver }
type sCIMEventConnectionResolver struct{ *Resolver }
type sessionResolver struct{ *Resolver }
type sessionConnectionResolver struct{ *Resolver }