Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Issue while changing the password automatically for an Application

gazanjum
Regular Contributor
Regular Contributor

Hi Team,

While triggering a password change for a local app account from CPAM, we are getting the below provisioning comments in the Change Password task:

gazanjum_0-1700579463073.jpeg

However, when the same master account credentials are used via Postman it is giving the expected response.

Sharing the JSON details here:

Connection JSON:
{
  "authentications": {
    "acctAuth": {
      "authType": "Basic",
      "httpMethod": "POST",
      "url": "https://xxx/admin/login",
      "httpParams": {},
      "httpHeaders": {},
      "httpContentType": "application/json",
      "properties": {
        "email": "",
        "password": ""
      },
      "authError": [
        "InvalidAuthenticationToken", "Couldn't aunthenticate you",
        "AuthenticationFailed"
      ],
      "errorPath": "error",  
      "retryFailureStatusCode": [
      400
      ],
      "maxRefreshTryCount": 5,
      "tokenResponsePath": "token",
      "tokenType": "Basic",
      "accessToken": "Basic abcd"
    }
  }
}

 CreateAccountJSON: {}


ChangePassJSON:

{
    "call": [
        {
            "name": "call1",
            "connection": "acctAuth",
            "url": "https://xxx/admin/users/10",
            "httpMethod": "PUT",
            "httpParams": "{\"password\": \"${password}\"}",
            "httpContentType": "application/json",
            "httpHeaders": {
                "Authorization": "${access_token}",
                "contentType": "application/json"
            },
            "successResponses": {
                "statusCode": [
                    201,
                    200,
                    204
                ]
            }
        }
    ]
}

Additionally:

1. The app generates a jwt token when login API is triggered

2. This jwt token is used to change the password of an account via API.

1 REPLY 1

Saathvik
All-Star
All-Star

@gazanjum : What is the type of target here where these local app accounts reside? I want to understand the type integration you had with Target. 

Also, You are saying you have to use JWT token but in connectionJSON I see you are doing basic authentication type. I feel something wrong with your connection JSON. Can you please share postman screenshots for login API and change password API?


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.