Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Delinea/Thycotic accounts import issue

do12
New Contributor III
New Contributor III

Hi

I used the Thycotic connector and the connection JSON is successful. However ImportAccountEntJSON is not working and I can't import entitlements or accounts. The error I'm seeing in the job is:

Error WebService call failed After retrying 2 times with responseStatusCode null - Failed url-https://****.secretservercloud.eu/api/v1/users?filter.includeInactive=true&skip=0&take=100 with Error Message-null

It works in Postman fine, can you advise why your standard Thycotic connector isn't working for me in this instance please?

ConnectionJSON + ImportAccountEntJSON and Postman curl command for successfully getting users attached. 

19 REPLIES 19

rushikeshvartak
All-Star
All-Star

Postman screenshot 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

attached Postman screenshots.

  • can you confirm anyone of below working if no share logs
  • Ent import
  • Account import
  • Account to Ent import

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

all not working

NM
Honored Contributor III
Honored Contributor III

Hi @do12 can you share logs in text format?


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

do12
New Contributor III
New Contributor III

logs attached.

  • Share logs when you save a connection. TO validate connection, generate the required token 

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

nothing useful in logs when I generate connection.  what should I search for on logs in this scenario?  

You can give logs for 5 minutes once clicked on save conection button


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

logs attached, had to save as csv this time.

Logs are not relevant . What is name of connection ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

I've added test connection in connection JSON as well:

"testConnectionParams": {
"http": {
"url": "https://removed.secretservercloud.eu/api/v1/users?filter.includeInactive=true&skip=0&take=1 ",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpParams": {},
"httpHeaders": {
"Authorization": "${access_token}",
"Content-Type": "application/json",
"Accept": "application/json" }
},

This step fails. I've attached the logs. 

[This message has been edited by moderator to mask sensitive information]

This is not correct way to add testconnectionParam.

Share full json


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

If the connection JSON I add before says connection successful why would I not be able to see any logs?

Here is the full connection JSON with test added which fails. Connection name is Secret_Server_DEV.  

 

{
"authentications": {
"acctAuth": {
"authType": "oauth2",
"url": "https://****.secretservercloud.eu/oauth2/token",
"httpMethod": "POST",
"httpParams": {
"username": "****",
"password": "****",
"grant_type": "password" },
"httpHeaders": {
"Content-Type": "application/x-www-form-urlencoded",
"Accept": "*/*" },
"httpContentType": "application/x-www-form-urlencoded",
"expiryError": "Authentication failed or expired token",
"retryFailureStatusCode": [
401,
403
],
"authError": [
"Login failed",
"Authentication failed or expired token" ],
"timeOutError": "Authentication failed or expired token",
"errorPath": "message",
"maxRefreshTryCount": 2,
"tokenResponsePath": "access_token",
"tokenType": "Bearer",
"accessToken": "abcd",
"testConnectionParams": {
"http": {
"url": "https://****.secretservercloud.eu/api/v1/users?filter.includeInactive=true&skip=0&take=1",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpParams": {},
"httpHeaders": {
"Authorization": "${access_token}",
"Content-Type": "application/json",
"Accept": "application/json" }
},
"successResponses": {
"statusCode": [
200,
201,
202,
203,
204,
205
]
},
"unsuccessResponses":
{
"statusCode": [400, 401, 404, 500]
}
}
}
}
}

Hardcode token in testconnection param and share logs during save connection


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

do12
New Contributor III
New Contributor III

ok done that and logs attached I've seen this: 

pullObjectsByRest - responseStatusCode ::401

I've replicated everything from Postman I can see in Saviynt Connection JSON so your help is much appreciated.

You have issue with connection JSON use below

{
  "authentications": {
    "acctAuth": {
      "authType": "oauth2",
      "url": "https://abctest.secretservercloud.com/oauth2/token",
      "httpMethod": "POST",
      "httpParams": {
        "username": "xyz@abc.com",
        "password": "abctss1+",
        "grant_type": "password"      },
      "httpHeaders": {
        "Accept": "application/json"      },
      "httpContentType": "application/x-www-form-urlencoded",
      "expiryError": "Authentication failed or expired token",
      "retryFailureStatusCode": [
        401,
        403
      ],
      "authError": [
        "Login failed",
        "Authentication failed or expired token"      ],
      "timeOutError": "Authentication failed or expired token",
      "errorPath": "message",
      "maxRefreshTryCount": 2,
      "tokenResponsePath": "access_token",
      "tokenType": "Bearer",
      "accessToken": "<specify access token>",
      "testConnectionParams": {
        "http": {
          "url": "https://abctest.secretservercloud.com/api/v1/users?filter.includeInactive=true&take=1&skip=0",
          "httpContentType": "application/json",
          "httpMethod": "GET",
          "httpParams": {},
          "httpHeaders": {
            "Authorization": "${access_token}"          }
        },
        "successResponses": {
          "statusCode": [
            200,
            201,
            202,
            203,
            204,
            205
          ]
        }
      }
    }
  }
}

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Amit_Malik
Valued Contributor II
Valued Contributor II

Hi @do12 , here is the connection JSON working for us.

{
"authentications": {
"userAuth": {
"authType": "oauth2",
"url": "https://abc.secretservercloud.co.uk/oauth2/token",
"httpMethod": "POST",
"httpParams": {
"username": "xyz",
"password": "abc",
"grant_type": "password"},
"httpHeaders": {
"Accept": "application/json"},
"httpContentType": "application/x-www-form-urlencoded",
"expiryError": "Authentication failed or expired token",
"retryFailureStatusCode": [
401,
403
],
"authError": [
"Login failed",
"Authentication failed or expired token"],
"timeOutError": "Authentication failed or expired token",
"errorPath": "message",
"maxRefreshTryCount": 2,
"tokenResponsePath": "access_token",
"tokenType": "Bearer",
"accessToken": "Bearer AgIDA4LD1eCplJEVMtMdOuS7_DELETED",
"testConnectionParams": {
"http": {
"url": "https://abc.secretservercloud.co.uk/api/v1/users?filter.includeInactive=true&take=1&skip=0",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpParams": {},
"httpHeaders": {
"Authorization": "${access_token}" }
},
"successResponses": {
"statusCode": [
200,
201,
202,
203,
204,
205
]
}
}
}
}
}

 

Thanks,

Amit

If this answers your query, Please ACCEPT SOLUTION and give KUDOS.

Kind Regards,
Amit Malik
If this helped you move forward, please click on the "Kudos" button.
If this answers your query, please select "Accept As Solution".

do12
New Contributor III
New Contributor III

thank you this is working now.