Protect Scope endpoint
<Resource context="(.*)/api/identity/user/v1.0/update-username(.*)" secured="true" http-method="PUT">
<Permissions>/permission/admin/manage/identity/usermgt/update</Permissions>
</Resource>
+
+ <Resource context="(.*)/api/identity/oauth2/v1.0/(.*)" secured="true" http-method="all"/>
</ResourceAccessControl>
<ClientAppAuthentication>
<Context>/scim2/</Context>
<Context>/api/identity/entitlement/</Context>
<Context>/api/identity/oauth2/dcr/v1.1/</Context>
+ <Context>/api/identity/oauth2/v1.0/</Context>
</WebApp>
<Servlet>
<Context>/identity/(.*)</Context>
