Establishing GCP Rest connection using Service Account JSON

[Mohit_Sanka]

Hi All,

We are trying to establish a connection between Saviynt and GCP and we are trying to do it with the Rest connector.

We are getting an error while we are trying to use the JWT authentication method suggested in Fresh Desk.

Error:

Got Webservice API Response: [headers:[WWW-Authenticate: Bearer realm="https://accounts.google.com/", Vary: Origin, Vary: X-Origin, Vary: Referer, Content-Type: application/json; charset=UTF-8, Date: Tue, 20 Dec 2022 13:20:02 GMT, Server: ESF, Content-Length: 839, X-XSS-Protection: 0, X-Frame-Options: SAMEORIGIN, X-Content-Type-Options: nosniff, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"], responseText:{
"error": {
"code": 401,
"message": "Request is missing required authentication credential. Expected OAuth 2 access token, login cookie or other valid authentication credential. See https://developers.google.com/identity/sign-in/web/devconsole-project.",
"errors": [
{
"message": "Login Required.",
"domain": "global",
"reason": "required",
"location": "Authorization",
"locationType": "header"
}
],
"status": "UNAUTHENTICATED",
"details": [
{
"@type": "type.googleapis.com/google.rpc.ErrorInfo",
"reason": "CREDENTIALS_MISSING",
"domain": "googleapis.com",
"metadata": {
"method": "ccc.hosted.frontend.directory.v1.DirectoryUsers.List",
"service": "admin.googleapis.com"
}
}
]
}
}

Please help us understand what went wrong and what we have to do to establish the connection.

Thanks & Regards,

Mohit Srinath Sanka.

[rushikeshvartak]

Provide connection screenshot

[Mohit_Sanka]

Hi Rushikesh,

The connection JSON is attached.

Thanks,
Mohit.

[rushikeshvartak]

Please confirm about saviynt version JWT Supported from

JWT: Used for authentication using JSON Web Tokens (JWT). For this authentication, specify the values for the following attributes: jwtConfig, signedAlgorithm, key, and jwtExpiryDuration. This authentication type is supported from Release v5.5 SP3.11 and v2021.0 onwards.

Generate Access token from postman and paste in accessToken for first time