Group Provisioning failing in GCP

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

Version 8.2

Hi Team,

I am trying to create a group in GCP and tried below provisioning plan. As per Group provisioning policy, I have added both name and email attributes. However, the provisioning is failing with the error “email is missing” though email is present in the plan. Any thoughts?

Group Provisioning Policy:

    <Form name="group" objectType="group" type="Create">
      <Attributes>
        <Map>
          <entry key="pageTitle" value="group"/>
        </Map>
      </Attributes>
      <Section>
        <Field displayName="con_form_GAR_group_email" helpKey="help_con_form_GAR_primary_group_email" name="Email" required="true" type="string"/>
        <Field displayName="con_form_GAR_group_name" helpKey="help_con_form_GAR_primary_group_name" name="name" reviewRequired="true" type="string"/>
      </Section>
    </Form>

Provisioning Plan:

<ProvisioningPlan>
<ObjectRequest application="GCP-IIQ-QA" nativeIdentity="gg_cloud_test_gcp_04082024" op="Create" type="group">
<AttributeRequest name="email" op="Set" value="[email protected]"/>
<AttributeRequest name="description" op="Set" value="gg_cloud_test_gcp_04082024"/>
</ObjectRequest>
</ProvisioningPlan>

Provisioning Result:

<ProvisioningProject>
  <MasterPlan>
    <ProvisioningPlan>
      <ObjectRequest application="GCP-IIQ-QA" nativeIdentity="gg_cloud_test_gcp_04082024" op="Create" type="group">
        <AttributeRequest name="email" op="Set" value="[email protected]"/>
        <AttributeRequest name="name" op="Set" value="gg_cloud_test_gcp_04082024"/>
        <AttributeRequest name="description" op="Set" value="gg_cloud_test_gcp_04082024"/>
      </ObjectRequest>
    </ProvisioningPlan>
  </MasterPlan>
  <ProvisioningPlan targetIntegration="GCP-IIQ-QA" trackingId="7c0e1bc1a3fd4ee0966670e5b22b9793">
    <ObjectRequest application="GCP-IIQ-QA" nativeIdentity="gg_cloud_test_gcp_04082024" op="Create" targetIntegration="GCP-IIQ-QA" type="group">
      <Attributes>
        <Map>
          <entry key="provisioningTransactionId" value="0a2c2b288ebf18b3818ebff3a9870211"/>
        </Map>
      </Attributes>
      <AttributeRequest name="name" op="Set" value="gg_cloud_test_gcp_04082024"/>
      <AttributeRequest name="description" op="Set" value="gg_cloud_test_gcp_04082024"/>
      <AttributeRequest name="email" op="Set" value="[email protected]"/>
      <ProvisioningResult status="failed">
        <Errors>
          <Message key="openconnector.ConnectorException: Exception occurred. Error message - [ ConnectorException ] &amp;#xA; [ Error details ] HTTP not ended OK. Response Code - 400 Error - Missing required field: email" type="Error"/>
        </Errors>
      </ProvisioningResult>
    </ObjectRequest>
  </ProvisioningPlan>
</ProvisioningProject>
2

Can you try enabling the trace logging and share the logs. Also, have you confirmed if the service account has the correct permissions (GROUP ADMIN)?