Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Error while creating Azure Account

rahul_p
Regular Contributor III
Regular Contributor III

Hello Team,

I am integrating Azure AD with Saviynt for provisioning, we have successfully completed the Azure AD import and now doing REST connection for provisioning.

Connection is working fine using POSTMAN.

Initially we got Authentication_MissingOrMalformed exception which I resolved by adding retryFailureStatusCode parameter at connection JSON.

 

Had a call with Azure Team and access has been granted properly to registered application.

I have tried both the URL https://graph.microsoft.com/v1.0/users" and https://graph.windows.net/myorganization/users/${user.username}?api-version=1.6

Now I am facing below error:

 

Spoiler
"2024-04-18T15:13:43.810+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-8-qq89z","DEBUG","called api..."
"2024-04-18T15:13:43.811+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-8-qq89z","DEBUG","timeout validated for api..."
"2024-04-18T15:13:43.811+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-8-qq89z","DEBUG","got response for api..."
"2024-04-18T15:13:43.811+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG",""
"2024-04-18T15:13:43.811+00:00","ecm-worker","rest.RestUtilService","quartzScheduler_Worker-8-qq89z","DEBUG","pullObjectsByRest - responseStatusCode ::403"
"2024-04-18T15:13:43.812+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","Entered getResponseHeaders method"
"2024-04-18T15:13:43.812+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","responseError : Authorization_RequestDenied"
"2024-04-18T15:13:43.812+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","isAuthError: false"
"2024-04-18T15:13:43.812+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","pullObjectsByRest - responseMap.size : 1"
"2024-04-18T15:13:43.812+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","pullObjectsByRest - objectList.size : 1"
"2024-04-18T15:13:43.813+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","ERROR","Call response: {"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"6229eff7-fbf4-4051-aaac-45992942b988","date":"2024-04-18T15:13:43"}}"
"2024-04-18T15:13:43.813+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","ERROR","callResponseMap: [odata.error:[code:Authorization_RequestDenied, message:[lang:en, value:Insufficient privileges to complete the operation.], requestId:6229eff7-fbf4-4051-aaac-45992942b988, date:2024-04-18T15:13:43]]"
"2024-04-18T15:13:43.813+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","showResponse: null"
"2024-04-18T15:13:43.814+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","createNewUser - temp.status - Failed"
"2024-04-18T15:13:43.814+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","doBreak: true"
"2024-04-18T15:13:43.824+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","Response size: 2"
"2024-04-18T15:13:43.825+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","Enter encryptHeaders"
"2024-04-18T15:13:43.825+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","Exit encryptHeaders"
"2024-04-18T15:13:43.826+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","Task Response: {"auditDetails":{"call1":[{"headers":null,"message":{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"5ff1e5eb-4091-42a6-8674-c392ca895804","date":"2024-04-16T12:35:51"}},"statusCode":403,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"},{"headers":null,"message":{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"bbb001d0-14d5-48b7-ac66-01cd26541c3b","date":"2024-04-18T14:59:57"}},"statusCode":403,"description":null,"status":"Failed"}]},"call1":{"headers":null,"message":{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"6229eff7-fbf4-4051-aaac-45992942b988","date":"2024-04-18T15:13:43"}},"statusCode":403,"description":null,"status":"Failed"}}"
"2024-04-18T15:13:43.826+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","accountId: null"
"2024-04-18T15:13:43.827+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","accountResponseMap: null"
"2024-04-18T15:13:43.827+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","taskResult: false"
"2024-04-18T15:13:43.827+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","isEntitlementOnly: false"
"2024-04-18T15:13:43.827+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","DEBUG","taskResult:: false"
"2024-04-18T15:13:43.827+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-8-qq89z","ERROR","Error while creating account - <username> removing tasks from the list "

Please let me know if anybody faced such kind of issue.

Regards,

Rahul

12 REPLIES 12

rushikeshvartak
All-Star
All-Star

Please share JSON and why Azure AD connection is not used for Provisioning ?

 

Try below

Spoiler
{
"accountIdPath": "call1.message.id",
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {
"comments": "call1.message.displayName~#~char",
"displayName": "call1.message.displayName~#~char",
"name": "call1.message.userPrincipalName~#~char"
},
"call": [
{
"name": "call1",
"connection": "userAuth",
"url": "https://graph.microsoft.com/v1.0/users",
"httpMethod": "POST",
"httpParams": "{\"givenName\":\"${user.firstname}\",\"surname\":\"${user.lastname}\",\"displayName\":\"${user.firstname} ${user.lastname} Privileged\",\"jobTitle\": \"${user.title}\",\"state\":\"${user.state}\",\"employeeId\":\"${user.username}\",\"streetAddress\":\"${user.street}\",\"officeLocation\":\"${user.job_function}\",\"department\": \"${user.departmentname}\",\"city\":\"Privileged\",\"country\":\"${user.country}\",\"mailNickname\":\"${user.username}\",\"companyName\": \"${user.customproperty7==null ? user.customproperty3 : user.customproperty7}\",\"UsageLocation\":\"US\",\"userPrincipalName\":\"${accountName}\",\"accountEnabled\": true,\"passwordProfile\" : {\"forceChangePasswordNextSignIn\": true,\"password\": \"${password}\"}}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201,
204,
205
]
}
}
]
}

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

rahul_p
Regular Contributor III
Regular Contributor III

Hello @rushikeshvartak ,

Saviynt document says to use Azure AD connection for import and REST connection for provisioning so using REST connection.

I tried with your create account JSON but getting below error:

Spoiler
2024-04-19T08:26:36.247+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Inside token Expiry Exception block. connectionParamMap.refreshTryCount : 4"
"2024-04-19T08:26:36.247+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Incrementing connectionParamMap.refreshTryCount : 5"
"2024-04-19T08:26:36.247+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","maxRefreshTryCount : 5"
"2024-04-19T08:26:36.248+00:00","ecm-worker","rest.RestUtilService","quartzScheduler_Worker-4-h7q6g","DEBUG","Calling https://login.microsoftonline.com/<tenantID>/oauth2/token"
"2024-04-19T08:26:36.248+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","calling executeRequestWithTimeoutConfig for api..."
"2024-04-19T08:26:36.248+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","calling api..."
"2024-04-19T08:26:36.248+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","before calling executeRequestWithHeaders for api..."
"2024-04-19T08:26:36.248+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","isFipsEnabled = false"
"2024-04-19T08:26:36.249+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","getHttpClient - proxyParams : null"
"2024-04-19T08:26:36.249+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","getHttpClient - sslSocketFactory : null"
"2024-04-19T08:26:36.249+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","setting connection timeout to 10 seconds and request timeout to 60 seconds"
"2024-04-19T08:26:36.250+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","getHttpClient - HttpClientBuilder.create().build() called."
"2024-04-19T08:26:36.374+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","called executePostRequestWithHeaders for api..."
"2024-04-19T08:26:36.374+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","after calling executeRequestWithHeaders for api..."
"2024-04-19T08:26:36.375+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","called api..."
"2024-04-19T08:26:36.375+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","timeout validated for api..."
"2024-04-19T08:26:36.375+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","got response for api..."
"2024-04-19T08:26:36.375+00:00","ecm-worker","rest.RestUtilService","quartzScheduler_Worker-4-h7q6g","DEBUG","fetching result from response.responseText"
"2024-04-19T08:26:36.376+00:00","ecm-worker","rest.RestUtilService","quartzScheduler_Worker-4-h7q6g","DEBUG","connectionid:: null"
"2024-04-19T08:26:36.385+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","access token populated for oauth authentication.."
"2024-04-19T08:26:36.418+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","parsing original httpParams after binding"
"2024-04-19T08:26:36.458+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Inside pullObjectsByRest"
"2024-04-19T08:26:36.458+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG",""
"2024-04-19T08:26:36.458+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","calling executeRequestWithTimeoutConfig for api..."
"2024-04-19T08:26:36.459+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","calling api..."
"2024-04-19T08:26:36.459+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","before calling executeRequestWithHeaders for api..."
"2024-04-19T08:26:36.459+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","isFipsEnabled = false"
"2024-04-19T08:26:36.459+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","getHttpClient - proxyParams : null"
"2024-04-19T08:26:36.459+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","getHttpClient - sslSocketFactory : null"
"2024-04-19T08:26:36.460+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","setting connection timeout to 10 seconds and request timeout to 60 seconds"
"2024-04-19T08:26:36.460+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","getHttpClient - HttpClientBuilder.create().build() called."
"2024-04-19T08:26:36.479+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","called executePostRequestWithHeaders for api..."
"2024-04-19T08:26:36.479+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","after calling executeRequestWithHeaders for api..."
"2024-04-19T08:26:36.480+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","called api..."
"2024-04-19T08:26:36.480+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","timeout validated for api..."
"2024-04-19T08:26:36.480+00:00","ecm-worker","services.HttpClientUtilityService","quartzScheduler_Worker-4-h7q6g","DEBUG","got response for api..."
"2024-04-19T08:26:36.480+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG",""
"2024-04-19T08:26:36.480+00:00","ecm-worker","rest.RestUtilService","quartzScheduler_Worker-4-h7q6g","DEBUG","pullObjectsByRest - responseStatusCode ::401"
"2024-04-19T08:26:36.480+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Exception in pullObjectsByRest :401"
"2024-04-19T08:26:36.481+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Inside token Expiry Exception block. connectionParamMap.refreshTryCount : 5"
"2024-04-19T08:26:36.481+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Incrementing connectionParamMap.refreshTryCount : 6"
"2024-04-19T08:26:36.481+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","maxRefreshTryCount : 5"
"2024-04-19T08:26:36.481+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Exception in token refresh : null"
"2024-04-19T08:26:36.481+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Error WebService call failed After retrying 5 times with responseStatusCode-null, Failed url-https://graph.microsoft.com/v1.0/users, Error Message - null"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Decrementing connectionParamMap.refreshTryCount : 5"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Decrementing connectionParamMap.refreshTryCount : 4"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Decrementing connectionParamMap.refreshTryCount : 3"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Decrementing connectionParamMap.refreshTryCount : 2"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Decrementing connectionParamMap.refreshTryCount : 1"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Decrementing connectionParamMap.refreshTryCount : 0"
"2024-04-19T08:26:36.482+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Call response: null"
"2024-04-19T08:26:36.483+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","callResponseMap: [:]"
"2024-04-19T08:26:36.483+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","showResponse: null"
"2024-04-19T08:26:36.483+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","createNewUser - temp.status - Failed"
"2024-04-19T08:26:36.483+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","doBreak: true"
"2024-04-19T08:26:36.494+00:00","ecm-worker","rest.RestUtilService","quartzScheduler_Worker-4-h7q6g","DEBUG","Exception in RestUtil.getAt : groovy.lang.MissingPropertyException: No such property: id for class: java.lang.String"
"2024-04-19T08:26:36.495+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Response size: 2"
"2024-04-19T08:26:36.495+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Enter encryptHeaders"
"2024-04-19T08:26:36.495+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Exit encryptHeaders"
"2024-04-19T08:26:36.495+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","Task Response: {"auditDetails":{"call1":[{"headers":null,"message":{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"9fbcef09-c971-4026-ba8d-3c75d8badcdb","date":"2024-04-18T14:59:57"}},"statusCode":403,"description":null,"status":"Failed"},{"headers":null,"message":{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"dcde21c2-ef67-4108-8aba-1f716084902f","date":"2024-04-18T15:13:44"}},"statusCode":403,"description":null,"status":"Failed"},{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"}]},"call1":{"headers":null,"message":"","statusCode":null,"description":null,"status":"Failed"}}"
"2024-04-19T08:26:36.495+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","accountId: null"
"2024-04-19T08:26:36.496+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","accountResponseMap: null"
"2024-04-19T08:26:36.496+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","taskResult: false"
"2024-04-19T08:26:36.496+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","isEntitlementOnly: false"
"2024-04-19T08:26:36.496+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","DEBUG","taskResult:: false"
"2024-04-19T08:26:36.497+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-4-h7q6g","ERROR","Error while creating account - <username> removing tasks from the list "

Also, below is the connection JSON:

Spoiler
{
"authentications": {
"userAuth": {
"authType": "oauth2",
"url": "https://login.microsoftonline.com/<tenantID>/oauth2/token",
"httpMethod": "POST",
"httpParams": {
"grant_type": "client_credentials",
"client_secret": "<secret>",
"client_id": "<id>",
"resource": "https://management.azure.com/"
},
"httpHeaders": {
"contentType": "application/x-www-form-urlencoded"
},
"httpContentType": "application/x-www-form-urlencoded",
"expiryError": "ExpiredAuthenticationToken",
"authError": [
"InvalidAuthenticationToken"
],
"retryFailureStatusCode": [
401
],
"timeOutError": "Read timed out",
"errorPath": "error.code",
"maxRefreshTryCount": 5,
"tokenResponsePath": "access_token",
"tokenType": "Bearer",
"accessToken": "Bearer abcd"
},
"entAuth": {
"authType": "oauth2",
"url": "https://login.microsoftonline.com/<tenantID>/oauth2/token",
"httpMethod": "POST",
"httpParams": {
"grant_type": "client_credentials",
"client_secret": "<secret>",
"client_id": "<id>",
"resource": "https://graph.windows.net/"
},
"httpHeaders": {
"contentType": "application/x-www-form-urlencoded"
},
"httpContentType": "application/x-www-form-urlencoded",
"expiryError": "ExpiredAuthenticationToken",
"authError": [
"InvalidAuthenticationToken",
"Authentication_MissingOrMalformed"
],
"retryFailureStatusCode": [
401
],
"timeOutError": "Read timed out",
"errorPath": "odata~dot#error.code",
"maxRefreshTryCount": 3,
"tokenResponsePath": "access_token",
"tokenType": "Bearer",
"accessToken": "Bearer abcde"
}
}
}

 Thanks,

Rahul

from v23.11 you can same AzureAD Connection

You have issue in connection json


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

rahul_p
Regular Contributor III
Regular Contributor III

Hello @rushikeshvartak ,

Can you please tell me what is the issue with connection JSON?

Regards,

Rahul

Issue with token . Use azure ad connector


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

rahul_p
Regular Contributor III
Regular Contributor III

Hello @rushikeshvartak ,

I used the azure ad connector, but facing bellow issue

"2024-05-06T14:43:42.535+00:00","ecm-worker","services.ArsTaskHelperService","quartzScheduler_Worker-2-pck8c","DEBUG","Found List of Tasks[com.saviynt.ecm.task.ArsTasks : 27706]"
"2024-05-06T14:43:42.535+00:00","ecm-worker","services.ArsTaskHelperService","quartzScheduler_Worker-2-pck8c","DEBUG","Validating tasks for Securitysystem - Azure AD Domain"
"2024-05-06T14:43:42.535+00:00","ecm-worker","services.ArsTaskHelperService","quartzScheduler_Worker-2-pck8c","DEBUG","new account , accountName = <userid> , taskType = 3"
"2024-05-06T14:43:42.540+00:00","ecm-worker","services.ArsTaskService","quartzScheduler_Worker-2-pck8c","DEBUG","Calling azureADRestProvisioningService createAccount with Sec System - Azure AD Domain and tasklist - [T-06071:[com.saviynt.ecm.task.ArsTasks : 27706]]"
"2024-05-06T14:43:42.541+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Entering azureADRestProvisioningService : createAccount"
"2024-05-06T14:43:42.542+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","initializing Provisioning connection"
"2024-05-06T14:43:42.619+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","email: firstname.lastname@testDomain.com"
"2024-05-06T14:43:42.619+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Calling createNewUser"
"2024-05-06T14:43:42.620+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","arsTasks.provisioningComments null"
"2024-05-06T14:43:42.620+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","arsTasks?.requestAccessKey: null"
"2024-05-06T14:43:42.649+00:00","ecm-worker","services.SaviyntCommonUtilityService","quartzScheduler_Worker-2-pck8c","DEBUG","Sql = Select epattr from Endpoint_attributes epattr where epattr.endpoints.id = :epid and epattr.requestType=1 and epattr.defaultvalue is not null and epattr.defaultvalue <> '' "
"2024-05-06T14:43:42.650+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Entered generatePasswordFromJsonOrRule"
"2024-05-06T14:43:42.651+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Generating password policy from security system/default policy"
"2024-05-06T14:43:42.651+00:00","ecm-worker","services.SaviyntCommonUtilityService","quartzScheduler_Worker-2-pck8c","DEBUG","PolicyRule is null"
"2024-05-06T14:43:42.651+00:00","ecm-worker","services.SaviyntCommonUtilityService","quartzScheduler_Worker-2-pck8c","DEBUG","minLen: 10, maxLen: 15, noOfCAPSAlpha: 1, noOfDigits: 2, noOfSplChars: 2"
"2024-05-06T14:43:42.652+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Exit generatePasswordFromJsonOrRule"
"2024-05-06T14:43:42.652+00:00","ecm-worker","services.SaviyntCommonUtilityService","quartzScheduler_Worker-2-pck8c","DEBUG","Enter getStandardBindingVariable"
"2024-05-06T14:43:42.653+00:00","ecm-worker","services.SaviyntCommonUtilityService","quartzScheduler_Worker-2-pck8c","DEBUG","Exit getStandardBindingVariable"
"2024-05-06T14:43:42.653+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Total Call: 1"
"2024-05-06T14:43:42.682+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","connection: userAuth"
"2024-05-06T14:43:42.695+00:00","ecm-worker","rest.RestProvisioningService","quartzScheduler_Worker-2-pck8c","ERROR","Access Token is null.."
"2024-05-06T14:43:42.695+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Response size: 0"
"2024-05-06T14:43:42.695+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","Task Response: null"
"2024-05-06T14:43:42.696+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","accountId: null"
"2024-05-06T14:43:42.696+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","accountResponseMap: null"
"2024-05-06T14:43:42.696+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","taskResult: false"
"2024-05-06T14:43:42.696+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","isEntitlementOnly: false"
"2024-05-06T14:43:42.696+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","DEBUG","taskResult:: false"
"2024-05-06T14:43:42.696+00:00","ecm-worker","azure.AzureADRestProvisioningService","quartzScheduler_Worker-2-pck8c","ERROR","Error while creating account - userid removing tasks from the list "

Please suggest.

Thanks,
Rahul 

[This post has been edited by a moderator to fix a formatting issue.]

  • Does import works ?

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

rahul_p
Regular Contributor III
Regular Contributor III

Hello @rushikeshvartak ,

Yeah, import works fine.

Thanks.

Share create account json


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

rahul_p
Regular Contributor III
Regular Contributor III

Hello @rushikeshvartak ,

Please find below create account json:

Spoiler
{
"accountIdPath": "call1.message.id",
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {
"comments": "call1.message.displayName~#~char",
"displayName": "call1.message.displayName~#~char",
"name": "call1.message.userPrincipalName~#~char"
},
"call": [
{
"name": "call1",
"connection": "userAuth",
"url": "https://graph.microsoft.com/v1.0/users",
"httpMethod": "POST",
"httpParams": "{\"givenName\":\"${user.firstname}\",\"surname\":\"${user.lastname}\",\"displayName\":\"${user.firstname} ${user.lastname} Privileged\",\"jobTitle\": \"${user.title}\",\"state\":\"${user.state}\",\"employeeId\":\"${user.username}\",\"streetAddress\":\"${user.street}\",\"officeLocation\":\"${user.job_function}\",\"department\": \"${user.departmentname}\",\"city\":\"Privileged\",\"country\":\"${user.country}\",\"mailNickname\":\"${user.username}\",\"companyName\": \"${user.customproperty7==null ? user.customproperty3 : user.customproperty7}\",\"UsageLocation\":\"US\",\"userPrincipalName\":\"${accountName}\",\"accountEnabled\": true,\"passwordProfile\" : {\"forceChangePasswordNextSignIn\": true,\"password\": \"${password}\"}}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201,
204,
205
]
}
}
]
}

Regards,

Rahul

{
"accountIdPath": "call1.message.id",
"dateFormat": "yyyy-MM-dd'T'HH:mm:ssXXX",
"responseColsToPropsMap": {
"comments": "call1.message.displayName~#~char",
"displayName": "call1.message.displayName~#~char",
"name": "call1.message.userPrincipalName~#~char"
},
"call": [
{
"name": "call1",
"connection": "${connectionName}",
"url": "https://graph.microsoft.com/v1.0/users",
"httpMethod": "POST",
"httpParams": "{\"givenName\":\"${user.firstname}\",\"surname\":\"${user.lastname}\",\"displayName\":\"${user.firstname} ${user.lastname} Privileged\",\"jobTitle\": \"${user.title}\",\"state\":\"${user.state}\",\"employeeId\":\"${user.username}\",\"streetAddress\":\"${user.street}\",\"officeLocation\":\"${user.job_function}\",\"department\": \"${user.departmentname}\",\"city\":\"Privileged\",\"country\":\"${user.country}\",\"mailNickname\":\"${user.username}\",\"companyName\": \"${user.customproperty7==null ? user.customproperty3 : user.customproperty7}\",\"UsageLocation\":\"US\",\"userPrincipalName\":\"${accountName}\",\"accountEnabled\": true,\"passwordProfile\" : {\"forceChangePasswordNextSignIn\": true,\"password\": \"${password}\"}}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201,
204,
205
]
}
}
]
}

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi @rahul_p 

As confirmed by you on the ticket, it is working now with the JSON provided in the documentation.

https://docs.saviyntcloud.com/bundle/AzureAD-v24x/page/Content/Configuring-the-Integration-for-Provi... 

Regards,

Dhruv Sharma