Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Okta Failed to import one or more object types

sandeepgudipudi
New Contributor III
New Contributor III

I am using Okta Rest Connector. The connection to Okta is successfully established. While running job i am getting error "Error parsing ConnectionJSON. Please verify if it is valid". I am trying to fetch account data from specific okta group.

1 (5).png

Connection Json

{
"authentications": {
"acctAuth": {
"authType": "oauth2",
"url": "https://abc.oktapreview.com/api/v1",
"httpMethod": "POST",
"httpHeaders": {
"contentType": "application/json"
},
"httpContentType": "application/json",
"expiryError": "ExpiredAuthenticationToken",
"authError": [
"InvalidAuthenticationToken",
"AuthenticationFailed"
],
"timeOutError": "Read timed out",
"errorPath": "error.code",
"maxRefreshTryCount": 5,
"tokenResponsePath": "access_token",
"tokenType": "SSWS",
"accessToken": "SSWS desfskfdsfhdskfdsfkdsfdsf",
"testConnectionParams": {
"http": {
"url": "https://abc.oktapreview.com/api/v1/users?limit=10",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpContentType": "application/json",
"httpMethod": "GET"
},
"successResponses": {
"statusCode": [
200
]
},
"errors": [
"Couldn't authenticate you"
],
"errorPath": "error.code"
}
}
}
}

 

ImportAccountEntJSON

As stated in document [Accounts and entitlements are imported to IGA via the ImportAccountEntJSON parameter.] i added below json to ImportAccountEntJSON.

Examples for JSON Construction (saviyntcloud.com)

 

 

{

"accountParams": {

"connection": "acctAuth",

"processingType": "SequentialAndIterative",

"call": {

"call1": {

"callOrder": 0,

"stageNumber": 0,

"http": {

"url": "https://abc.oktapreview.com/api/v1/groups/00go16wojfJvLmMvT0h7/users",

"httpContentType": "application/json",

"httpMethod": "GET",

"httpHeaders": {

"Authorization": "${access_token}"

}

},

"listField": "",

"keyField": "username",

"colsToPropsMap": {

"username":"profile.login~#~char",
"displayname":"profile.displayName~#~char",
"firstname":"profile.firstName~#~char",
"lastname":"profile.lastName~#~char",
"email":"profile.email~#~char",
"city":"profile.city~#~char",
"companyname":"profile.organization~#~char",
"country":"profile.country~#~char",
"manager":"profile.manager~#~char",
"customproperty1":"id~#~char",
"customproperty2":"activated~#~char",
"customproperty3":"profile.statusChanged~#~char",
"customproperty4":"lastLogin~#~date",
"customproperty5":"passwordChanged~#~date",
"customproperty6":"profile.personID~#~char",
"customproperty7":"profile.countryCode~#~char",
"customproperty8":"profile.zipCode~#~char",
"customproperty9":"profile.gender~#~char",
"customproperty10":"profile.homePhone~#~char",
"customproperty11":"profile.department~#~char",
"customproperty12":"profile.contractEndDate~#~date",
"customproperty13":"profile.oktaId~#~char",
"employeeid":"profile.employeeNumber~#~char",
"employeeType":"profile.userType~#~char",
"job_function":"profile.businessUnit~#~char",
"location":"profile.location~#~char",
"middlename":"profile.middleName~#~char",
"preferedFirstName":"profile.knownAs~#~char",
"secondaryPhone":"profile.mobilephone~#~char",
"statuskey":"status~#~char",
"accounttype":"profile.userType~#~char"

}

}

}

},

"entitlementParams": {

"processingType": "SequentialAndIterative",

"entTypes": {

"groups": {

"entTypeOrder": 0,

"entTypeLabels": {

"customproperty1": "id"

},

"call": {

"call1": {

"connection": "acctAuth",

"callOrder": 0,

"stageNumber": 0,

"http": {

"httpHeaders": {

"Authorization": "${access_token}"

},

"url": "https://abc.oktapreview.com/api/v1/groups",

"httpContentType": "application/json",

"httpMethod": "GET"

},

"listField": "",

"keyField": "entitlementID",

"colsToPropsMap": {

"entitlementID": "id~#~char",

"entitlement_value": "id~#~char",

"customproperty1": "name~#~char"

},

"apps": {

"entTypeOrder": 1,

"entTypeLabels": {

"customproperty1": "Name",

"customproperty2": "Status"

},

"call": {

"call1": {

"callOrder": 0,

"stageNumber": 0,

"http": {

"url": "https://abc.oktapreview.com/api/v1/apps",

"httpHeaders": {

"Authorization": "${access_token}",

"Accept": "application/json"

},

"httpContentType": "application/json",

"httpMethod": "GET"

},

"listField": "",

"keyField": "entitlementID",

"colsToPropsMap": {

"entitlementID": "id~#~char",

"entitlement_value": "id~#~char",

"customproperty1": "name~#~char",

"customproperty2": "status~#~char"

}

}

}

}

}

}

}

}

},

"acctEntParams": {

"connection": "acctAuth",

"entTypes": {

"apps": {

"call": {

"call1": {

"callOrder": 0,

"stageNumber": 0,

"processingType": "httpEntToAcct",

"http": {

"httpHeaders": {

"Authorization": "${access_token}"

},

"url": "https://abc.oktapreview.com/api/v1/apps/${id}/users.json",

"httpContentType": "application/json",

"httpMethod": "GET"

},

"listField": "",

"entKeyField": "entitlementID",

"acctIdPath": "id~#~char",

"acctKeyField": "accountID",

"customproperty4": "label~#~char",

"groups": {

"call": {

"call1": {

"callOrder": 0,

"stageNumber": 0,

"processingType": "httpEntToAcct",

"http": {

"httpHeaders": {

"Authorization": "${access_token}"

},

"url": "https://abc.oktapreview.com/api/v1/groups/${id}/users.json",

"httpContentType": "application/json",

"httpMethod": "GET"

},

"listField": "",

"entKeyField": "entitlementID",

"acctIdPath": "id~#~char",

"acctKeyField": "accountID",

"customproperty5": "label~#~char"

}

}

}

}

}

}

}

}

}

 

4 REPLIES 4

sandeepgudipudi
New Contributor III
New Contributor III
 

rushikeshvartak
All-Star
All-Star

SSWS token type is not supported


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

sandeepgudipudi
New Contributor III
New Contributor III

Can you provide an alternate solution for obtaining okta authentication 

Please check okta documentation 

https://developer.okta.com/docs/reference/api/authn/


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.