{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T07:21:32Z","timestamp":1782631292184,"version":"3.54.5"},"reference-count":113,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3304270","type":"journal-article","created":{"date-parts":[[2023,8,10]],"date-time":"2023-08-10T17:45:10Z","timestamp":1691689510000},"page":"86872-86894","source":"Crossref","is-referenced-by-count":10,"title":["System for Cross-Domain Identity Management (SCIM): Survey and Enhancement With RBAC"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0157-3057","authenticated-orcid":false,"given":"Thomas","family":"Baumer","sequence":"first","affiliation":[{"name":"Nexis GmbH, Regensburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5562-1280","authenticated-orcid":false,"given":"Mathis","family":"M\u00fcller","sequence":"additional","affiliation":[{"name":"Chair of Information Systems, Faculty of Informatics and Data Science, University of Regensburg, Regensburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1338-9003","authenticated-orcid":false,"given":"G\u00fcnther","family":"Pernul","sequence":"additional","affiliation":[{"name":"Chair of Information Systems, Faculty of Informatics and Data Science, University of Regensburg, Regensburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"crossref","DOI":"10.17487\/RFC7642","volume-title":"System for Cross-domain Identity Management: Definitions, Overview, Concepts, and Requirements","author":"Li","year":"2015"},{"key":"ref2","doi-asserted-by":"crossref","DOI":"10.17487\/RFC7643","volume-title":"System for Cross-domain Identity Management: Core Schema","author":"Hunt","year":"2015"},{"key":"ref3","doi-asserted-by":"crossref","DOI":"10.17487\/RFC7644","volume-title":"System for Cross-domain Identity Management: Protocol","author":"Hunt","year":"2015"},{"key":"ref4","volume-title":"Portable Contacts: A Common Format and Protocol for Accessing Contacts","author":"Smarr","year":"2008"},{"key":"ref5","doi-asserted-by":"crossref","DOI":"10.17487\/rfc6350","volume-title":"vCard Format Specification","author":"Perreault","year":"2011"},{"key":"ref6","volume-title":"Lightweight Directory Access Protocol (LDAP): Directory Information Models","author":"Zeilenga","year":"2006"},{"key":"ref7","volume-title":"Security Assertion Markup Language (SAML) V2.0 Technical Overview","author":"Ragouzis","year":"2008"},{"key":"ref8","volume-title":"OpenID Connect Core 1.0 incorporating Errata Set 1","author":"Sakimura","year":"2014"},{"key":"ref9","volume-title":"System for Cross-Domain Identity Management","author":"Erdtman","year":"2023"},{"key":"ref10","article-title":"Hype cycle for digital identity, 2022","author":"Gaehtgens","year":"2022"},{"key":"ref11","doi-asserted-by":"crossref","first-page":"237","DOI":"10.1016\/S0065-2458(08)60206-5","article-title":"Role-based access control","volume":"46","author":"Sandhu","year":"1998","journal-title":"Adv. Comput."},{"key":"ref12","volume-title":"SCIM Roles and Entitlements Extension","author":"Zollner","year":"2022"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.5220\/0010315706110618"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-86586-3_1"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_24"},{"issue":"8","key":"ref16","doi-asserted-by":"crossref","first-page":"748","DOI":"10.1016\/j.cose.2011.08.002","article-title":"Roles in information security\u2014A survey and classification of the research area","volume":"30","author":"Fuchs","year":"2011","journal-title":"Comput. Secur."},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2871148"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.25300\/misq\/2013\/37.2.01"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2015.485"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.2307\/25148625"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3470133"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3380851.3416759"},{"key":"ref23","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9110","volume-title":"HTTP Semantics","author":"Fielding","year":"2022"},{"issue":"3","key":"ref24","first-page":"21","article-title":"API design principles & security best practices\u2013accelerate your business without compromising security","volume":"1","author":"Lamba","year":"2019","journal-title":"Cybernomics"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-38791-8_2"},{"key":"ref26","volume-title":"Uniform Resource Identifier (URI): Generic Syntax","author":"Berners-Lee","year":"2005"},{"key":"ref27","doi-asserted-by":"crossref","DOI":"10.17487\/RFC8259","volume-title":"The JavaScript Object Notation (JSON) Data Interchange Format","author":"Bray","year":"2017"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.17487\/rfc3076","volume-title":"Canonical XML Version 1.0","author":"Boyer","year":"2001"},{"key":"ref29","article-title":"A terminology for talking about privacy by data minimization: Anonymity, unlinkability, undetectability, unobservability, pseudonymity, and identity management","author":"Pfitzmann","year":"2010"},{"key":"ref30","volume-title":"Sarbanes-Oxley Act of 2002. Corporate responsibility","year":"2002"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2882870"},{"key":"ref32","first-page":"1","volume-title":"Identity Management","author":"Just","year":"2019"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICITIS.2010.5689468"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45608-2_3"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-162"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3381991.3395601"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463559"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463569"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3322431.3325419"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3322431.3325106"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3381991.3395614"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3532105.3535022"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/775265.775268"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/360303.360333"},{"key":"ref46","article-title":"Secure computer systems: Mathematical foundations","author":"Bell","year":"1973"},{"key":"ref47","article-title":"Integrity considerations for secure computer systems","author":"Biba","year":"1977"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3533703"},{"key":"ref49","article-title":"Optimization of access control policies","volume":"70","author":"Kern","year":"2022","journal-title":"J. Inf. Secur. Appl."},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22479-0_12"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3007204"},{"key":"ref52","volume-title":"OASIS Service Provisioning Markup Language (SPML) Version 2","author":"Cole","year":"2005"},{"key":"ref53","doi-asserted-by":"crossref","DOI":"10.17487\/rfc6749","volume-title":"The OAuth 2.0 Authorization Framework","author":"Hardt","year":"2012"},{"key":"ref54","volume-title":"eXtensible Access Control Markup Language (XACML) Version 3.0","author":"Rissanen","year":"2013"},{"key":"ref55","volume-title":"XACML v3.0 Core and Hierarchical Role Based Access Control (RBAC) Profile Version 1.0","year":"2014"},{"key":"ref56","first-page":"64","article-title":"Attribute quality management for dynamic identity and access management","volume":"44","author":"Kunz","year":"2019","journal-title":"J. Inf. Secur. Appl."},{"key":"ref57","volume-title":"Consensus on the Future of Standards-Based Provisioning and SPML","author":"Diodati","year":"2010"},{"key":"ref58","volume-title":"SCIM 2.0 Token Search Extension","author":"Hunt","year":"2012"},{"key":"ref59","volume-title":"SCIM 2.0 Extended Search","year":"2012"},{"key":"ref60","volume-title":"OAuth 2.0 SCIM Client Registration Profile","author":"Hunt","year":"2013"},{"key":"ref61","volume-title":"SCIM Directory Services","author":"Hunt","year":"2013"},{"key":"ref62","volume-title":"SCIM User Scenarios","author":"Li","year":"2013"},{"key":"ref63","volume-title":"SCIM Use Cases","author":"Hunt","year":"2013"},{"key":"ref64","volume-title":"SCIM and vCard Mapping","author":"Greevenbosch","year":"2014"},{"key":"ref65","volume-title":"SCIM Profile For Enhancing Just-In-Time Provisioning","author":"Wahl","year":"2014"},{"key":"ref66","volume-title":"SCIM Soft Delete","author":"Ansari","year":"2015"},{"key":"ref67","volume-title":"SCIM Event Notification","author":"Hunt","year":"2015"},{"key":"ref68","volume-title":"SCIM Password Management Extension","author":"Hunt","year":"2015"},{"key":"ref69","volume-title":"SCIM HTTP Search Method Extension","author":"Hunt","year":"2015"},{"key":"ref70","volume-title":"SCIM Event Extension","author":"Hunt","year":"2016"},{"key":"ref71","volume-title":"System for Cross-Domain Identity Management: Discovery","author":"Hunt","year":"2016"},{"key":"ref72","volume-title":"SCIM Polling Protocol","author":"McMurtry","year":"2016"},{"key":"ref73","volume-title":"SCIM Extension for Privileged Access Management","author":"Grizzle","year":"2017"},{"key":"ref74","volume-title":"SCIM Use Cases for SECEVENTS","author":"Hunt","year":"2017"},{"key":"ref75","volume-title":"SCIM Profile for Provisioning Users Into Relying Party Applications","author":"Wahl","year":"2019"},{"key":"ref76","volume-title":"SCIM Protocol: Multi-Value Filtering Extension","author":"Hunt","year":"2021"},{"key":"ref77","volume-title":"SCIM Verified Domains Extension","author":"Zollner","year":"2021"},{"key":"ref78","volume-title":"SCIM Referential Value Location Extension","year":"2022"},{"key":"ref79","volume-title":"Cursor-based Pagination of SCIM Resources","author":"Peterson","year":"2023"},{"key":"ref80","volume-title":"SCIM Profile for Security Event Tokens","author":"Hunt","year":"2023"},{"key":"ref81","volume-title":"Device Schema Extensions to the SCIM Model","author":"Shahzad","year":"2023"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3098708"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS53863.2021.00016"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/RISE.2017.8378210"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/FiCloud.2017.14"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3309074.3309078"},{"key":"ref87","doi-asserted-by":"crossref","first-page":"73","DOI":"10.1016\/j.comcom.2015.07.011","article-title":"Unified communications as a service and WebRTC: An identity-centric perspective","volume":"68","author":"Beltran","year":"2015","journal-title":"Comput. Commun."},{"key":"ref88","doi-asserted-by":"crossref","first-page":"811","DOI":"10.1016\/j.future.2018.04.009","article-title":"An integrated workspace for the Cherenkov telescope array","volume":"94","author":"Costa","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref89","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.cosrev.2019.05.002","article-title":"On cloud security requirements, threats, vulnerabilities and countermeasures: A survey","volume":"33","author":"Kumar","year":"2019","journal-title":"Comput. Sci. Rev."},{"key":"ref90","doi-asserted-by":"crossref","first-page":"144","DOI":"10.1016\/j.cose.2017.05.008","article-title":"A distributed authentication model for composite web services","volume":"70","author":"Nacer","year":"2017","journal-title":"Comput. Secur."},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-1165-9_69"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1051\/epjconf\/202024503021"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1080\/00051144.2018.1530827"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-72120-6_13"},{"issue":"2","key":"ref95","first-page":"364","article-title":"Offensive threats","volume":"25","author":"Mahdi","year":"2017","journal-title":"J. Univ. Babylon"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/5512075"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.25.766"},{"issue":"6","key":"ref98","first-page":"269","article-title":"CloudSim framework for federation of identity management in cloud computing","volume":"4","author":"Shere","year":"2017","journal-title":"Int. J. Comput. Eng. Res. Trends"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/1828747"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/898\/10\/102009"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19210-9_7"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/HPCSim.2016.7568393"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/eScience.2016.7870911"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1155\/2017\/6384186"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/898\/10\/102016"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/GIOTS.2017.8016216"},{"key":"ref107","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1016\/j.comcom.2018.08.010","article-title":"Protecting personal data in IoT platform scenarios through encryption-based selective disclosure","volume":"130","author":"Hern\u00e1ndez-Ramos","year":"2018","journal-title":"Comput. Commun."},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/GIOTS.2019.8766390"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud\/EdgeCom.2019.000-7"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA.2019.8868982"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3341492"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN48450.2020.9059457"},{"key":"ref113","doi-asserted-by":"crossref","DOI":"10.17487\/rfc4122","volume-title":"A Universally Unique IDentifier (UUID) URN Namespace","author":"Leach","year":"2005"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10214272.pdf?arnumber=10214272","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T03:57:30Z","timestamp":1710388650000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10214272\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":113,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3304270","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}