Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/12/2022 01:19 PM
Hi Experts,
We have setup a generic REST based Azure AD connector for importing the accounts and groups into Saviynt.
The initial account import ran for more than 1.5 hours and completed successfully. All the subsequent imports started failing after around 1 hour with the below error message :
Message-{"error":{"code":"Authentication_ExpiredToken","message":"Your access token has expired.
Please renew it before submitting the request.
Have somebody come across similar issue.? Any guidance would be greatly appreciated.
Attached the Connection json.
Solved! Go to Solution.
04/12/2022 02:59 PM
Hi Jeswin,
Your connectionJSON is missing the following parameter.
"retryFailureStatusCode": [401]
Please update the above with the API response code when the api call fails due to an expired access token.
For more details, please check the REST connector documentation guide:
https://saviynt.freshdesk.com/support/solutions/articles/43000521736-rest-connector-guide
Regards,
Sahaj
04/12/2022 02:59 PM
Thanks Sahaj for responding.
Have figured this out.
The fix was to add the below section in the connection json :
"authError":[
"InvalidAuthenticationToken",
"Authentication_ExpiredToken"
],
04/12/2022 02:59 PM
Jesvin Joseph,
I have the same problem, the above does not fix it though, so I think my issue is in the importAccountJson
Any chance you can paste your importAccountJson ?
Thanks
04/12/2022 02:59 PM
Hi Allan,
Are you getting the same error as mine.? Does the import fails after the token expires (in around an hour).
If so, it is more likely an issue on the connection json.
04/12/2022 02:59 PM
Hi Jesvin,
I get token error, but my import-job just keeps running (forever)
I tried multiple things and added various error handling values, to no luck.
The reason I'm asking for a sample of your ImportAccountJson, is that Import_Accounts actually works in our setup, but Import_Access does not... I find that odd. (I even tried querying a specific entitlement - still runs forever)
Thanks