Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

REST- Null response in ImportAccountEntJSON

sk
Regular Contributor
Regular Contributor

Hi,

We are trying to configure importaccountentJSON for REST connector. However, we get stopped by this kind of error constantly. We are not able to import any account information. What could cause these? Error message

2024-07-22T15:41:07+05:30-ecm-worker-rest.RestUtilService-quartzScheduler_Worker-8-q462w-DEBUG-Got null response statusCode with erroMsg - [error:Error Illegal character in query at index 96: https://test-it-ops-abc.cdf.abc.net/services/search/jobs/export?search=| inputlookup azure_ad_signin_logs.csv&output_mode=json&preview=false

Tried %7C in place of pipe(|) but getting the same error.

{
"accountParams":{},
"entitlementParams":{
"processingType":"SequentialAndIterative",
"entTypes":{
"Account Logs":{
"entTypeOrder":0,
"call":{
"call1":{
"connection":"acctAuth",
"callOrder":0,
"stageNumber":0,
"http":{
"httpHeaders":{
"Authorization":"${access_token}",
"Accept":"application/json"
},
"url":"https://test-it-ops-abc.cdf.abc.net/services/search/jobs/export?search=| inputlookup azure_ad_signin_logs.csv&output_mode=json&preview=false",
"httpContentType":"application/json",
"httpMethod":"GET"
},
"statusConfig":{
"active":"A",
"inactive":"I"
},
"listField":"result",
"keyField":"entitlementID",
"colsToPropsMap":{
"entitlementID":"mail~#~char",
"entitlement_value":"mail~#~char",
},
"disableDeletedEntitlements":false
}
}
}
}
},
"acctEntParams":{
"processingType":"acctToEntMapping"
}
}

Thanks in Advance

[This message has been edited by moderator to disable URL hyperlink]

15 REPLIES 15

NM
Honored Contributor III
Honored Contributor III

Hi @sk , try backslash


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

sk
Regular Contributor
Regular Contributor

Hi @NM , thanks for the response. I have tried by adding backslash front of pipe symbol but didn't work

"url": "https://test-it-ops-abc.cdf.abc.net/services/search/jobs/export?search=%7Cinputlookup%20azure_ad_sig..."


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

sk
Regular Contributor
Regular Contributor

Hi @rushikeshvartak , tried but still getting the null response from target

 

NM
Honored Contributor III
Honored Contributor III

@sk , share error logs


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

sk
Regular Contributor
Regular Contributor

@NM / @rushikeshvartak  please find the logs 

2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-calling executeRequestWithTimeoutConfig for api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-Enter getTimeOutConfig
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-connectionType: REST
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-connectionTimeoutConfig before guardRail validation: null
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-INFO: connectionTimeoutConfig is null, setting it to default value
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-Final connectionTimeoutConfig after guardRail validation: [connectionTimeout:10, readTimeout:60, retryCount:3, retryWait:2]
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-calling api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-before calling executeRequestWithHeaders for api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-isFipsEnabled = false
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-getHttpClient - proxyParams : null
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-getHttpClient - sslSocketFactory : null
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-setting connection timeout to 10 seconds and request timeout to 60 seconds
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-getHttpClient - HttpClientBuilder.create().build() called.
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-called executeGetRequestWithHeaders for api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-after calling executeRequestWithHeaders for api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-called api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-timeout validated for api...
 
2024-07-23T13:15:33+05:30-ecm-worker-services.HttpClientUtilityService-quartzScheduler_Worker-9-q462w-DEBUG-got response for api...
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-DEBUG-
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestUtilService-quartzScheduler_Worker-9-q462w-DEBUG-pullObjectsByRest - responseStatusCode ::null
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestUtilService-quartzScheduler_Worker-9-q462w-DEBUG-Got showLogs = true
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestUtilService-quartzScheduler_Worker-9-q462w-DEBUG-Got null response statusCode with erroMsg - [error:Error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-ERROR-Exception in getting response in pullObjectsByRest :
 
2024-07-23T13:15:33+05:30-ecm-worker--null-q462w--java.lang.Exception: NullResponseFromTarget at com.saviynt.provisoning.rest.RestUtilService.checkForErrorMsg(RestUtilService.groovy:1463) at com.saviynt.provisoning.rest.RestProvisioningService.pullObjectsByRest(RestProvisioningService.groovy:4551) at com.saviynt.provisoning.rest.RestProvisioningService.processEntitlementByPagination(RestProvisioningService.groovy:952) at com.saviynt.provisoning.rest.RestProvisioningService.processEntitlementByEntFilterAndNoFilter(RestProvisioningService.groovy:851) at com.saviynt.provisoning.rest.RestProvisioningService.processEntitlementsFinal(RestProvisioningService.groovy:695) at com.saviynt.provisoning.rest.RestProvisioningService.processAccessFullBySequentialAndIterative(RestProvisioningService.groovy:653) at com.saviynt.provisoning.rest.RestProvisioningService.importAccessFullBySequentialAndIterativeWithoutEntFilter(RestProvisioningService.groovy:530) at com.saviynt.provisoning.rest.RestProvisioningService.importAccessFullBySequentialAndIterative(RestProvisioningService.groovy:284) at com.saviynt.provisoning.rest.RestProvisioningService.importAccessFull(RestProvisioningService.groovy:170) at com.saviynt.provisoning.rest.RestProvisioningService.doImport(RestProvisioningService.groovy:144) at com.saviynt.ecm.integration.ExternalConnectionCallService.invokeExternalMethod(ExternalConnectionCallService.groovy:233) at SapImportJob.execute(SapImportJob.groovy:109) at org.quartz.core.JobRunShell.run(JobRunShell.java:199) at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:546)
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestUtilService-quartzScheduler_Worker-9-q462w-DEBUG-Got showLogs = true
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestUtilService-quartzScheduler_Worker-9-q462w-DEBUG-Got showLogs = true
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-DEBUG-Error while getting Access Import response for entType- Account Logs, url- https://test-it-ops-abc.cdf.abc.net/services/search/jobs/export?search=%7Cinputlookup%20 azure_ad_signin_logs.csv&output_mode=json&preview=false is: null
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-DEBUG-Getting response statusCode null, so failing Access Import Job
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-DEBUG-calling buildEntitlementMappings..
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-DEBUG-Inside RestProvisioiningService.buildEntitlementMappings
 
2024-07-23T13:15:33+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-9-q462w-DEBUG-called fetchEntitlementTypesFromEntMappingParams..entTypesMap = [Account Logs:339]
 

NM
Honored Contributor III
Honored Contributor III

Hi @sk , it seems issue related to SSL certificate.

Did application team provide you with an certificate?


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

sk
Regular Contributor
Regular Contributor

No, we have checked with application team and they don't have any certificate

Does provisioning / test connection is working ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

sk
Regular Contributor
Regular Contributor

Hi @rushikeshvartak / @NM , the certificate is resolved and job is also getting success, but entitlements are not imported to saviynt. 

below json {
"accountParams":{},
"entitlementParams":{
"processingType":"SequentialAndIterative",
"entTypes":{
"Account Logs":{
"entTypeOrder":0,
"call":{
"call1":{
"connection":"acctAuth",
"callOrder":0,
"stageNumber":0,
"http":{
"httpHeaders":{
"Authorization":"${access_token}",
"Accept":"application/json"
},
"url":"https://test-it-ops-abc.cdf.abc.net/services/search/jobs/export?search=| inputlookup azure_ad_signin_logs.csv&output_mode=json&preview=false",
"httpContentType":"application/json",
"httpMethod":"GET"
},
"statusConfig":{
"active":"A",
"inactive":"I"
},
"listField":"result",
"keyField":"entitlementID",
"colsToPropsMap":{
"entitlementID":"mail~#~char",
"entitlement_value":"mail~#~char",
},
"disableDeletedEntitlements":false
}
}
}
}
},
"acctEntParams":{
"processingType":"acctToEntMapping"
}
}

Let me know If I am missing anything

Below are logs 

Got Webservice API Response: [headers:[Date: Tue, 23 Jul 2024 11:43:12 GMT, Cache-Control: private, Content-Type: text/xml; charset=UTF-8, X-Content-Type-Options: nosniff, Content-Length: 130, Vary: Cookie, Authorization, Connection: Keep-Alive, WWW-Authenticate: Basic realm="/splunk", X-Frame-Options: SAMEORIGIN, Server: Splunkd], responseText:<?xml version="1.0" encoding="UTF-8"?>
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Entered getResponseHeaders method
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-responseError : null
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-isAuthError: false
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-pullObjectsByRest - responseMap.size : 1
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-pullObjectsByRest - objectList.size : 1
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-secondaryEntTypeImportConfig: null
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Inside importAccessFull:persistEntObjects, pptTypeSep : ~#~
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-INFO: Entitlement_value is null, record not saved.
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-calling buildEntitlementMappings..
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Inside RestProvisioiningService.buildEntitlementMappings
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-called fetchEntitlementTypesFromEntMappingParams..entTypesMap = [AccountLogs:344]
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-calling processAccountEntitlementParams - memento.entTypesSet : [344]
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Inside processAccountEntitlementParams*****
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-inside processAccountEntitlementsByAccToEntMappings
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-populate userMap query: select new Map(u.username as username, u.id as id) from Users u where u.statuskey = 1 and u.userSource in ('174')
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-acctEntSql: select new Map(acc.accountID as accountID, acc.id as id, acc.customproperty31 as mappings) from Accounts acc where acc.endpointkey.id = 196 and ( acc.status = '1' or acc.status = 'Manually Provisioned' ) and acc.customproperty31 is not null and acc.customproperty31 != '{}' and acc.customproperty31 != '[]'
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-delete inactive account linking: true
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Inside deleteAccountEntitlementsByEntType
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Deletion of old Account_entitlements1 complete
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-processAccountEntitlementParams complete..
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-calling processEntitlementOwnerParams - memento.entTypesSet : [344]
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Inside processEntitlementOwnerParams*****
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Entitlement types from ImportAccountEntJSON.entMappingParams: [344]
 
2024-07-23T17:13:13+05:30-ecm-worker-rest.RestProvisioningService-quartzScheduler_Worker-10-cmsgl-DEBUG-Entitlement types from ownerEntTypeSet: []

NM
Honored Contributor III
Honored Contributor III

Hi @sk , did you upload the certificate? How did it get resolved?


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

sk
Regular Contributor
Regular Contributor

@NM , Yes uploaded the certificate

NM
Honored Contributor III
Honored Contributor III

@sk above logs doesn't have all the details ..share again after running access import


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

Please share postman screenshot and curl command [Refer https://codingnconcepts.com/postman/how-to-generate-curl-command-from-postman/ ]



⚠️‼️‼️Do not upload any attachments that contain sensitive information, such as IP Addresses, URLs, Company/Employee Names, Email Addresses, etc.‼️‼️⚠️


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

sk
Regular Contributor
Regular Contributor

@rushikeshvartak , Please find below

the curl --location 'https://test-it-ops-abc.cdf.abc.net/services/search/jobs/export?search=| inputlookup azure_ad_signin_logs.csv&output_mode=json&preview=false' \
--header 'Authorization: Basic axaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'