Fix SCIM resource identity contract