Error while doing test connection for web service application

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.3

Please share any images or screenshots, if relevant.

Screenshot (103)
Screenshot (103)1734Ɨ961 43 KB

Share all details about your problem, including any error messages you may have received.

I am doing basic authentication typed Web Service based connector application, I am using this in my local setup (localhost) , I am getting error as mentioned in the above screenshot attached.

class connector.common.XmlUtil (in unnamed module @0x2cc89213) cannot access class com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderFactoryImpl (in module java.xml) because module java.xml does not export com.sun.org.apache.xerces.internal.jaxp to unnamed module @0x2cc89213

  • My doubt is will I be able to connect with the connector from the localhost?
  • I found a page Link which show it is able to do using localhost but I cannot find the scim/v2/account in my local setup.

I am quite new to this topic so please share any documentation if possible to know more about the topic. Please help to newbie !
Thankou !

2

Hi @avanish0511,

welcome on the forum.

try to use the SCIM 2.0 connector:

image
image804Ɨ639 30.3 KB

The webservice of SP, follow the SCIM 2.0 standard, so for implement it, is more easier use the SCIM connector. Also, you can use the webservice connector, but you need to configure every single operation with the same structure of SCIM(SCIM doc)

1 Like
3

Hi and Hello,
welcome to the SailPoint Developer Community

What version of java you use? Here can be problem.

Second option (ā€œmaybeā€ This allows access to the restricted package)

Use --add-exports JVM Option

Regards,
Adam

4

Hi, Adam!
Thanks for replying to the post.
I am using openjdk 17.0.2.
Iā€™m not getting how to use Use --add-exports JVM Option this option and where to use it.

5

I have tried working on SCIM 2.0 but not able to fill all the title box as I donā€™t have all the credentials. I got a task which I am pasting below please look into it if you think I can do it from SCIM 2.0 then let me know.

Definition of a webservice target Application named ā€œIIQ Rest Applicationā€.

  • Create a new target Webservice connector Application ā€œIIQ Rest Applicationā€ and set a correlation rule Account attribute userName to IIQ attribute userName

  • Configure IIQ SCIM User operation end points as Webservice operations (Test Connection, Account Aggregation, Create Account, Update Account, Disable Account, Enable Account, Delete Account)

  • Configure id, userName, name, active, capabilities as the account schema attributes

  • Configure capabilities as a multi-valued, managed, entitlement attribute in the account schema

  • Configure account in provisioning policy for minimum attributes provision for identity into ā€œIIQ Rest Applicationā€

  • Perform account aggregation for ā€œIIQ Rest Applicationā€ with ā€œpromote managed attributesā€ flag set to true. Verify the aggregated accounts against the attributes of the respective Identities and the capabilities are promoted

  • Perform Create, Disable, Enable and Delete operations on the account

Expected Output:

  • Onboarding and Configuration of a webservice connector applicationļƒ  IIQ Rest Application
  • Verification of account attributes against the identities after account aggregation
  • Performing CRUD operations on the application account configuring the APIā€™s
6

Maybe I dont understand, but why dont use directly the API of IIQ?

7

I have tried all the ways to make that API ( http://localhost:8080/identityiq/scim/v2) work with web service connector, It is throwing the same error. Even I tried an external API (restdb.io) that is also giving error.

http://localhost:8080/identityiq/scim/v2 this API is not even giving response with Postman. Only your suggested way i.e. SCIM2.0 is working.

8

I tried in postman and it works:

image
image1199Ɨ816 41.2 KB

maybe the baseurl or the endpoint isnt correct or the communication is blocked between your pc and SP enviroment.

At the SCIM2.0 is a standard of webservice, you can replicate the behavior making the same call.

9

Yes maybe youā€™re using your sandbox environment thatā€™s why you have all the rights. With localhost:8080 itā€™s throwing errors.

10

it could depends how you had configured your enviroment. Try to change localhost with the name of the enviroment that you try to connect

11

I donā€™t have any other environment as I am newbie, so my org just given me setup in localhost to learn the basics of the tool.

12

How you refer with localhost?

in every case, to test the API, you must use this format: http://localhost:8080/identityiq/scim/v2, replacing localhost with the name of the server where IIQ is installed.

you can see that in the url:
image

in my case, I had install a local VM in my computer, called sandbox and I connect to 8080 port.

13

image
This is how it is defined in my local.

14

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.