Good luck on your next adventure, Chris!

Hi Yogesh, You can add users directly via the API. Here is the documentation for the API: http://docs.cloudfoundry.org/api/uaa/#create61 Madhura

Hi Everyone, We have made changes to the way *uaa.scim.users* and *uaa.scim.groups* can be specified in the deployment manifest. The *previous* format for uaa.scim.users was: - marissa|koala|marissa(a

The request to /oauth/authorize takes in a scope parameter where you can specify which scopes you want in your access token. That is what adding the scope in application.yml did. If you don't specify

So it looks like if the scope name starts with `uaa.` we ignore it at the time of app authorization. I will create a story in our backlog to investigate why that is the case. As a workaround if you wa

Can you send me the full request to /oauth/authorize when you get to the authorization page? You should be able to find it in the Network tab. wrote:

I suspect that the client did not get updated with the uaa.admin scope. Can you check the database to see if the client has that scope? It would be in the oauth_client_details table. If it hasn't been

Ok, so the oauth-client that is registered with the UAA for this application (app) only has the openid scope. If you want this client to be able to request other scopes on behalf of the user you would

Hi Brian, The scopes that end up in the access token are the intersection of the client scopes and the user scopes. Which oauth client have you configured your spring cloud application with? Thanks, M

Hi All, There have been some reports about the UAA pre-start script failing on bosh-lite. We will add a temporary workaround for this until we have a fix. Thanks, Priyata & Madhura

Hi All, The oauth client with client ID *cf* is meant to be used by the CF CLI for communicating with the UAA using password grant type. There are default values for this client here: https://github.c

Hi Matt, Having auto approve true on a client means the token will be granted without the user having to approve the scopes that the client is requesting. It is used for clients that have a grant type

Hi Tom, The recommended way to update uaa config in cf-release is to update the manifest file that was used for deploying CF and then doing a bosh deploy again. This will update the uaa.yml with the p

Hi Stephan, Could you send us the entire log for the UAA? Madhura