Delete account using User Update

[Prajna]

The requirement is to delete the Azure AD  account on termination of the user. The below mentioned remove account json is used for the REST connection

{

  "call": [

    {

      "name": "call1",

      "connection": "${connectionName}",

      "url": "https://graph.microsoft.com/v1.0/users/${account.accountID}",

      "httpMethod": "DELETE",

      "httpHeaders": {

        "Authorization": "${access_token}"

      },

      "httpContentType": "application/json",

      "successResponses": {

        "statusCode": [

          200,

          201,

          204,

          205

        ]

      }

    }

  ]

}

 When a user lifecycle status is terminated the user update rule triggers the remove account tasks.

The remove account tasks is getting triggered and when the provisioning job runs the account is becoming inactive in Saviynt and getting deleted from Azure end, but the task is not getting completed. It's failing without any errors in the provisioning comments. Please find the screenshot for reference.

Can you please provide any solution for this issue.

[indra_hema_95]

Hi @Prajna Can you please check the logs? If you able to find anything there?

Regards,

Indra

[Prajna]

There is no such error in logs.

[Amit_Malik]

Hi @Prajna ,

use this in config JSON , this will show the request Saviynt making and response from Azure

{
"showLogs": true
}

Have you tried same in postman and see the status code. 201 is mostly when we create object, so that you don't need in successResponses in JSON for sure. Check what status graph API gives on deletion and use that in your JSON

Thanks,

Amit

[rushikeshvartak]

If you are using Azure AD connector then use below JSON

{
  "call": [
    {
      "name": "call1",
      "connection": "${connectionName}",
      "url": "https://graph.microsoft.com/v1.0/users/${account.accountID}",
      "httpMethod": "DELETE",
      "httpHeaders": {
        "Authorization": "${access_token}"
      },
      "httpContentType": "application/json",
      "successResponses": {
        "statusCode": [
          200,
          201,
          204,
          205
        ]
      }
    }
  ]
}

If you are using REST Connector use below JSON

{
  "call": [
    {
      "name": "call1",
      "connection": "userAuth",
      "url": "https://graph.microsoft.com/v1.0/users/${account.accountID}",
      "httpMethod": "DELETE",
      "httpHeaders": {
        "Authorization": "${access_token}"
      },
      "httpContentType": "application/json",
      "successResponses": {
        "statusCode": [
          200,
          201,
          204,
          205
        ]
      }
    }
  ]
}

Connection name will be ${connectionName} in Azure and in REST actual connection name needs to be mentioned

[Prajna]

The rest connection is used for deprovisioning account. Now I have used the exact connection name. Please find the below json. Still getting the same issue.

{ "call": [ { "name": "call1", "connection": "AAD", "url": "https://graph.microsoft.com/v1.0/users/${account.accountID}", "httpMethod": "DELETE", "httpHeaders": { "Authorization": "${access_token}" }, "httpContentType": "application/json", "successResponses": { "statusCode": [ 200, 201, 204, 205 ] } } ] }

[Amit_Malik]

Hi @Prajna , if you are using REST connector then dont use "connection": "AAD" or ${connectionName}

{
"call": [
{
"name": "RemoveAccount",
"connection": "userAuth",

This accntAuth comes from connection JSON, see below, you need to use same - 

"authentications": {
"userAuth": {
"authType": "oauth2",

[rushikeshvartak]

• Please share connection json and logs

[stalluri]

@Prajna , if you are using Rest, try the JSON below.

Can you share the Connection JSON here?

[NM]

Hi @Prajna define the same connection name value via which you established connection in connection json.