Click HERE to see how Saviynt Intelligence is transforming the industry. |
01/22/2024 06:53 AM - edited 01/22/2024 07:24 AM
I am using Okta Rest Connector. The connection to Okta is successfully established. While running job i am getting error "Error parsing ConnectionJSON. Please verify if it is valid". I am trying to fetch account data from specific okta group.
Connection Json
{
"authentications": {
"acctAuth": {
"authType": "oauth2",
"url": "https://abc.oktapreview.com/api/v1",
"httpMethod": "POST",
"httpHeaders": {
"contentType": "application/json"
},
"httpContentType": "application/json",
"expiryError": "ExpiredAuthenticationToken",
"authError": [
"InvalidAuthenticationToken",
"AuthenticationFailed"
],
"timeOutError": "Read timed out",
"errorPath": "error.code",
"maxRefreshTryCount": 5,
"tokenResponsePath": "access_token",
"tokenType": "SSWS",
"accessToken": "SSWS desfskfdsfhdskfdsfkdsfdsf",
"testConnectionParams": {
"http": {
"url": "https://abc.oktapreview.com/api/v1/users?limit=10",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpContentType": "application/json",
"httpMethod": "GET"
},
"successResponses": {
"statusCode": [
200
]
},
"errors": [
"Couldn't authenticate you"
],
"errorPath": "error.code"
}
}
}
}
ImportAccountEntJSON
As stated in document [Accounts and entitlements are imported to IGA via the ImportAccountEntJSON parameter.] i added below json to ImportAccountEntJSON.
Examples for JSON Construction (saviyntcloud.com)
{
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://abc.oktapreview.com/api/v1/groups/00go16wojfJvLmMvT0h7/users",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpHeaders": {
"Authorization": "${access_token}"
}
},
"listField": "",
"keyField": "username",
"colsToPropsMap": {
"username":"profile.login~#~char",
"displayname":"profile.displayName~#~char",
"firstname":"profile.firstName~#~char",
"lastname":"profile.lastName~#~char",
"email":"profile.email~#~char",
"city":"profile.city~#~char",
"companyname":"profile.organization~#~char",
"country":"profile.country~#~char",
"manager":"profile.manager~#~char",
"customproperty1":"id~#~char",
"customproperty2":"activated~#~char",
"customproperty3":"profile.statusChanged~#~char",
"customproperty4":"lastLogin~#~date",
"customproperty5":"passwordChanged~#~date",
"customproperty6":"profile.personID~#~char",
"customproperty7":"profile.countryCode~#~char",
"customproperty8":"profile.zipCode~#~char",
"customproperty9":"profile.gender~#~char",
"customproperty10":"profile.homePhone~#~char",
"customproperty11":"profile.department~#~char",
"customproperty12":"profile.contractEndDate~#~date",
"customproperty13":"profile.oktaId~#~char",
"employeeid":"profile.employeeNumber~#~char",
"employeeType":"profile.userType~#~char",
"job_function":"profile.businessUnit~#~char",
"location":"profile.location~#~char",
"middlename":"profile.middleName~#~char",
"preferedFirstName":"profile.knownAs~#~char",
"secondaryPhone":"profile.mobilephone~#~char",
"statuskey":"status~#~char",
"accounttype":"profile.userType~#~char"
}
}
}
},
"entitlementParams": {
"processingType": "SequentialAndIterative",
"entTypes": {
"groups": {
"entTypeOrder": 0,
"entTypeLabels": {
"customproperty1": "id"
},
"call": {
"call1": {
"connection": "acctAuth",
"callOrder": 0,
"stageNumber": 0,
"http": {
"httpHeaders": {
"Authorization": "${access_token}"
},
"url": "https://abc.oktapreview.com/api/v1/groups",
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "id~#~char",
"entitlement_value": "id~#~char",
"customproperty1": "name~#~char"
},
"apps": {
"entTypeOrder": 1,
"entTypeLabels": {
"customproperty1": "Name",
"customproperty2": "Status"
},
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://abc.oktapreview.com/api/v1/apps",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "id~#~char",
"entitlement_value": "id~#~char",
"customproperty1": "name~#~char",
"customproperty2": "status~#~char"
}
}
}
}
}
}
}
}
},
"acctEntParams": {
"connection": "acctAuth",
"entTypes": {
"apps": {
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"processingType": "httpEntToAcct",
"http": {
"httpHeaders": {
"Authorization": "${access_token}"
},
"url": "https://abc.oktapreview.com/api/v1/apps/${id}/users.json",
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "",
"entKeyField": "entitlementID",
"acctIdPath": "id~#~char",
"acctKeyField": "accountID",
"customproperty4": "label~#~char",
"groups": {
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"processingType": "httpEntToAcct",
"http": {
"httpHeaders": {
"Authorization": "${access_token}"
},
"url": "https://abc.oktapreview.com/api/v1/groups/${id}/users.json",
"httpContentType": "application/json",
"httpMethod": "GET"
},
"listField": "",
"entKeyField": "entitlementID",
"acctIdPath": "id~#~char",
"acctKeyField": "accountID",
"customproperty5": "label~#~char"
}
}
}
}
}
}
}
}
}
01/22/2024 06:54 AM
01/23/2024 08:37 PM
SSWS token type is not supported
01/24/2024 07:07 AM
Can you provide an alternate solution for obtaining okta authentication
01/24/2024 11:51 AM - edited 01/24/2024 11:52 AM
Please check okta documentation
https://developer.okta.com/docs/reference/api/authn/