12/29/2022 03:12 AM
Hello,
I have configured an AzureAD connection and it is straightforward. I am simply importing all objects from Azure. All accounts and entitlements are imported but the acc-ent mapping doesn't work.
No account is associated with any entitlement imported from Azure. I tried add other fields in connection like ACCOUNT_IMPORT_FIELDS, ACCOUNT_ATTRIBUTES and ENTITLEMENT_ATTRIBUTES but nothing works.
Do you know what could be the issue?
12/29/2022 04:22 AM
12/29/2022 04:59 AM - edited 12/29/2022 05:33 AM
Hello,
1. The configuration is as follows:
2. This is the only error I found in logs.
DEBUG azure.AzureADProvisioningService - Inside AzureADProvisioningService.processMemberAndGuestPermission\n","stream":"stdout","time":"2022-12-28T13:54:49.184782645Z"}"
DEBUG azure.AzureADProvisioningService - Exception in AzureADProvisioningService.doImport : java.lang.IndexOutOfBoundsException: Index: 0, Size: 0\n","stream":"stdout","time":"2022-12-28T13:54:49.185796064Z"}"
Although something strange as well.
DEBUG generic.GenericProvisioningService - Inside disableEntitlementValues - entTypes to be disabled : [154]\n","stream":"stdout","time":"2022-12-28T13:54:49.164494275Z"}".
entitlemanttypekey - 154, is for AADGroup, which are the only entitlements present in Azure for import and are assigned to users. Not sure why.
3. All necessary permissions are in place.
12/29/2022 06:54 AM
Screenshot of connection
12/29/2022 07:27 AM - edited 12/29/2022 07:28 AM
I'm assuming that you are using the default AzureAD type connection. Can you ensure that you also have the following parameters populated ?
AUTHENTICATION_ENDPOINT
MICROSOFT_GRAPH_ENDPOINT
AZURE_MANAGEMENT_ENDPOINT
Also the error that you have shared, is that from Accounts Import or Access Import ?
12/29/2022 07:32 AM - edited 12/29/2022 07:51 AM
The error is in Access Import job.
Also, it gives error 400 on adding any value to these MICROSOFT_GRAPH_ENDPOINT, AZURE_MANAGEMENT_ENDPOINT.
12/29/2022 06:59 AM
12/29/2022 07:19 AM
And json while running job ?
12/29/2022 07:32 AM
I am simply running Full Access import job, no json added.