Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Add Access JSON for Distribution Group Provisioning

AshishDas
Regular Contributor II
Regular Contributor II

Hi,

We are trying to provision Azure Security groups via graph api and distribution groups via powershell within the same connector.

We have used a rest connector and have written the following condition in Add Access JSON as below:

When we provision a distribution group via powershell this works well, but incase of provisioning a security groups, it throws JSON Parse error.

Error : ERROR rest.RestProvisioningService - Exception in creating original http params:com.fasterxml.jackson.core.JsonParseException: Unrecognized token '$': was expecting ('true', 'false' or 'null')\n","stream":"stdout","time":"2022-12-15T07:15:56.442329776Z"}

 

Add Access Json

{
"name": "AADGroup",
"connection": "${entitlementValue.customproperty8.trim().equals('true') && entitlementValue.customproperty10.trim().equals('false') && entitlementValue.customproperty11==null? 'acctAuth' : 'userAuth'}",
"url": "${entitlementValue.customproperty8.trim().equals('true') && entitlementValue.customproperty10.trim().equals('false') && entitlementValue.customproperty17==null? 'http://<<hostname>>/<<PowershellAgentName>>/PS/ExecutePSScript':'https://graph.microsoft.com/v1.0/groups/'+entitlementValue.entitlementID+'/members/\\$ref'}",
"httpMethod": "POST",
"httpParams": "${entitlementValue.customproperty8.trim().equals('true') && entitlementValue.customproperty10.trim().equals('false') && entitlementValue.customproperty17==null?'{\"Script\":\"Powershell.exe -File c:\/Scripts\/DistributionGroupsAdd.ps1 '+entitlementValue.entitlement_value+' '+account.accountID+'\"}' : '{\"@ \":\"https://graph.microsoft.com/v1.0/directoryObjects/'+account.accountID+'\"}'}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/x-www-form-urlencoded",
"successResponses": {
"statusCode": [
200,
201,
204,
205
]
}
}

cp8: mail enabled

cp10:securityenable:

cp11:onprem sync

 

Document followed : https://saviynt.freshdesk.com/support/solutions/articles/43000463699-azure-ad-connector-guide#AzureA...

Any idea, if I am missing something

1 REPLY 1

rushikeshvartak
All-Star
All-Star

Did you tried to figured out where $ issue is occurring either connection or url . You can hardcode one by one


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.