Can We Change the Response Code Using After Operations Rule

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

Grant Role API for one of our applications always returns 200 response code but the response body has a parameter (IsSuccess=true/false) using which we can identify whether it actually the role to the user on end system or not.

SailPoint will always commit the status as response returned is 200. Is there a way to fail the access request by reading the response in this case if provisioning on end system got failed?

I have followed answer given in https://community.sailpoint.com/t5/IdentityIQ-Forum/Webservices-Connector-Can-We-Change-the-Response-Code-Using/m-p/197044.


true


I have added above lines in my app.xml file and handled exception in webserviceafteropsrule. rule is returning Process response ex: sailpoint.tools.GeneralException: operation has failed based on the response value(issucces=false) but I did not see any error on the UI and can see status committed only. Please advise what to do.

2

Hi @jespaancy,

Welcome back to SailPoint developer community.

Could you please share the snippet that you are using so that accordingly we can help.

Thanks

3

i had added below in the app.xml also

<entry key="throwProvAfterRuleException">
  <value>
    <Boolean>true</Boolean>
  </value>
</entry>
4

Hi @jespaancy,

Your request is not committing, or your failure processing is not working as per your expectation?

If possible, please share the rule snippet after removing sensitive details.

Thanks

5 
{
Map resJsonMap = JsonUtil.toMap(rawResponseObject);
boolean value1=true;
Object userEntry = resJsonMap.get("issuccess");					
					if (userEntry != null) {										
						value1 = (boolean)userEntry;						
						if (value1 == false){						
                        log.error(jsonMap.get("status"));
                        throw new GeneralException("operation has failed");                      
                         }
6

hi Ashutosh, API is returning response code 200 for incorrect input but response message shows issuccess false.
IIQ UI shows operation status committed but i need to see failure .

7

What is your response status mapping?

8

Hi @jespaancy,

Can you set the value to false and try.

Please refer to the below link.

Thanks

9

i changed to false but still i did not any error in the UI.response is below. I did not create any schema attribute for response. so i did not map response.

{
    "issuccess": false,
    "message": "winms - Invalid User ID."
}

iiq log shows below

2024-06-03T11:58:08,222 ERROR https-openssl-nio-443-exec-5 connector.webservices.v2.RequestOrchestratorV2:166 - value from JSON Body :::: false
2024-06-03T11:58:08,222 ERROR https-openssl-nio-443-exec-5 connector.webservices.v2.RequestOrchestratorV2:166 - Rule - Process response ex: sailpoint.tools.GeneralException: operation has failed
2024-06-03T11:58:08,238 ERROR https-openssl-nio-443-exec-5 connector.webservices.v2.RequestOrchestratorV2:166 - Rule - Process response : end
2024-06-03T11:58:08,238 DEBUG https-openssl-nio-443-exec-5 connector.webservices.v2.RequestOrchestratorV2:672 - Updated info map after operation rule post-processing: {issuccess=false, message=HUANGJJP - Invalid User ID.}
10

image
image1771×267 10.5 KB

11

Hi @jespaancy,

Have you mapped any code in the below snapshot in Successful Response Code?

image
image1774×738 26.8 KB

12

Also please try to get details of requestEndpoint in the log that what is the responseCodeList.

Thanks

13

yes as below

image
image1749×438 15.5 KB

14

Please change it once and see if it works .

15

IIQ is getting response code 200

16

Hi @jespaancy,

You may have to modify this as for your case it is not criteria for successful response.

Thanks

17

hi,
i removed successful response code as below but still getting status comitted

image
image1388×378 11.5 KB

image
image1786×309 17.6 KB

18

Hi @jespaancy,

Can you check if there is any cache issue ? As with exception throw and the below attribute mapped it should accept your change.

<entry key="throwProvAfterRuleException">
        <value>
          <Boolean>true</Boolean>
        </value>
      </entry>
19

hi
I cleared cache from debug page and cleared browser cache also but got the response same as before only.

20

Please share your application.xml