Rest API Token Retrieval

[bbuchler]

Hi Team, 

We are trying to grab the access token from our API response, but it does not have a path. IE the body of the response that contains the token is: "TOKEN". We have tried string.content, token, and leaving it blank. I have validated that it works if I grab the token from postman and put it under the accessToken. below is our connection JSON. 

{
"authentications":{
"acctAuth":{
"authType":"oauth2",
"httpHeaders":{
"Accept":"application/xml",
"contentType":"application/json"
},
"authError":[
"PASWS013E"
],
"url":"https://<HOSTNAME>/PasswordVault/API/auth/cyberark/Logon",
"httpMethod":"POST",
"httpContentType":"application/json",
"errorPath":"ErrorCode",
"maxRefreshTryCount":5,
"cleanUpTextContent": true,
"tokenResponsePath":"sessionId",
"accessToken":"$access_token",
"httpParams":"{\"username\":\"USERNAME\",\"password\":\"PASSWORD\"}",
"retryFailureStatusCode":[
401,
403
],
"testConnectionParams":{
"http":{
"url":"https://<hostname>/PasswordVault/API/Accounts/?limit=1&access_Token=$access_token",
"httpHeaders":{
"contentType":"application/json"
},
"httpContentType":"application/json",
"httpMethod":"GET"
}
}
}
}
}

To Add I have also tried sessionId from the rest developer handbook.

Thanks,

Brandon 

[This post has been edited by a Moderator to merge two posts.]

[rushikeshvartak]

Please share postman screenshot and curl command [Refer https://codingnconcepts.com/postman/how-to-generate-curl-command-from-postman/ ]

⚠️‼️‼️Do not upload any attachments that contain sensitive information, such as IP Addresses, URLs, Company/Employee Names, Email Addresses, etc.‼️‼️⚠️

[bbuchler]

HI @rushikeshvartak , 

Below is the postman response and curl command. 

Thanks,

Brandon 

[rushikeshvartak]

{
"authentications":{
"acctAuth":{
"authType":"oauth2",
"httpHeaders":{
"Accept":"application/xml",
"contentType":"application/json"
},
"authError":[
"PASWS013E"
],
"url":"https://<HOSTNAME>/PasswordVault/API/auth/cyberark/Logon",
"httpMethod":"POST",
"httpContentType":"application/json",
"errorPath":"ErrorCode",
"maxRefreshTryCount":5,
"cleanUpTextContent": true,
"tokenResponsePath":"",
"accessToken":"acc",
"httpParams":"{\"username\":\"USERNAME\",\"password\":\"PASSWORD\"}",
"retryFailureStatusCode":[
401,
403
],
"testConnectionParams":{
"http":{
"url":"https://<hostname>/PasswordVault/API/Accounts/?limit=1&access_Token=$access_token",
"httpHeaders":{
"contentType":"application/json"
},
"httpContentType":"application/json",
"httpMethod":"GET"
}
}
}
}
}

[bbuchler]

Hi @rushikeshvartak 

We have tried leaving the tokenResponsePath blank as above and tried with your JSON. It does not pick up the token. Below is a screenshot from the logs where it is writing acc (accessToken in JSON) as the token in the URL. 

Thanks,

Brandon 

[rushikeshvartak]

{
"authentications":{
"acctAuth":{
"authType":"oauth2",
"httpHeaders":{
"Accept":"application/xml",
"contentType":"application/json"
},
"authError":[
"PASWS013E"
],
"url":"https://<HOSTNAME>/PasswordVault/API/auth/cyberark/Logon",
"httpMethod":"POST",
"httpContentType":"application/json",
"errorPath":"ErrorCode",
"maxRefreshTryCount":5,
"cleanUpTextContent": true,
"tokenResponsePath":"string.content",
"accessToken":"acc",
"httpParams":"{\"username\":\"USERNAME\",\"password\":\"PASSWORD\"}",
"retryFailureStatusCode":[
401,
403
],
"testConnectionParams":{
"http":{
"url":"https://<hostname>/PasswordVault/API/Accounts/?limit=1&access_Token=$access_token",
"httpHeaders":{
"contentType":"application/json"
},
"httpContentType":"application/json",
"httpMethod":"GET"
}
}
}
}
}

[bbuchler]

Hi @rushikeshvartak , 

Same as above please see the below screenshot. 

Thanks,

Brandon 

[rushikeshvartak]

Remove test connection param and validate

[bbuchler]

Hi @rushikeshvartak , 

Jobs did not work. First screenshot is with string.content second it is left empty (for variable tokenResponsePath). 

Thanks,

Brandon 

[rushikeshvartak]

Above suggested json is from documentation 

[bbuchler]

Hi @rushikeshvartak , 

Yes, that is what we found as well. This seems to be an issue with Saviynt picking up the token if you don't have any other suggestions I will create a FD ticket. 

Thanks,

Brandon 

[rushikeshvartak]

Add feedback on saviynt doc they will provide working json

[bbuchler]

@rushikeshvartak Thank you I will try that first. 

[rushikeshvartak]

Refer https://forums.saviynt.com/t5/identity-governance/access-token-refresh-failure-issue-cyberark-target...

[bbuchler]

Hi @rushikeshvartak , 

This forums post looks to be similar to this one and they said that it is not working for the account imports. 
Solved: Generate token using cookie in responseText (Conne... - Saviynt Forums - 74310

Thanks,

Brandon 

[rushikeshvartak]

Did you tried this one ? @bbuchler 

[bbuchler]

@rushikeshvartak , 

No, we have not tried this one since our use cases are for imports which in the post states it does not work for that. 

Thanks,

Brandon