IdentityNow Orphan Accounts Connector

I wish I could add that but dynamic contents cannot be added to the configuration.

Hello Fernando,
I have an account from Orphan account source correlated to an Identity. Let says that it is an AD account.
If I disable this account from the identity, it will disable it in orphan account source.
But the account aggregated by orphan account from AD is not disable.

Is it expected ? I’m a little confused because it is not what I understand reading your doc and we can’t disable or remove access on the account aggregated by orphan source, I don’t see the interest …

Can you confirm that point ?

Hi Julien,

What you are saying is that if you disable one of my connector’s account, the associated account from the original source is not disabled too? If that’s the case, something is not right.

Can you please confirm?

Thanks.

Yes it is the case. In the screenshot, we have at the left an account from your connector and at the right, the account in the original source.


The account is also not disable in the AD itself.

I’m going to do some testing and I’ll get back to you.

Fixed on main repo. Please let me know if you run into more issues.

Hello Fernando, I have this error with npm run pack-zip.

Error: [tsl] ERROR in /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/src/sdk-client.ts(29,57)
      TS2345: Argument of type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosError<unknown, any>' is not assignable to parameter of type 'AxiosError<unknown, any>'.
  Types of property 'config' are incompatible.
    Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any> | undefined' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any> | undefined'. Two different types with this name exist, but they are unrelated.
      Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any>' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any>'. Two different types with this name exist, but they are unrelated.
        Types of property 'headers' are incompatible.
          Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosRequestHeaders' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosRequestHeaders'. Two different types with this name exist, but they are unrelated.
            Type 'AxiosRequestHeaders' is not assignable to type 'Partial<RawAxiosHeaders & { "Content-Length": AxiosHeaderValue; "Content-Encoding": AxiosHeaderValue; Accept: AxiosHeaderValue; "User-Agent": AxiosHeaderValue; Authorization: AxiosHeaderValue; } & { ...; }>'.
              Types of property '"Content-Length"' are incompatible.
                Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosHeaderValue | undefined' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosHeaderValue | undefined'. Two different types with this name exist, but they are unrelated.
                  Type 'AxiosHeaders' is not assignable to type 'AxiosHeaderValue | undefined'.
                    Type 'AxiosHeaders' is missing the following properties from type 'string[]': length, pop, push, join, and 27 more.
[tsl] ERROR in /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/src/sdk-client.ts(32,47)
      TS2345: Argument of type 'AxiosError<unknown, any>' is not assignable to parameter of type 'AxiosError'.
  Types of property 'config' are incompatible.
    Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any> | undefined' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any> | undefined'. Two different types with this name exist, but they are unrelated.
      Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any>' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any>'. Two different types with this name exist, but they are unrelated.
        Types of property 'headers' are incompatible.
          Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosRequestHeaders' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosRequestHeaders'. Two different types with this name exist, but they are unrelated.
            Type 'AxiosRequestHeaders' is not assignable to type 'Partial<RawAxiosHeaders & { "Content-Length": AxiosHeaderValue; "Content-Encoding": AxiosHeaderValue; Accept: AxiosHeaderValue; "User-Agent": AxiosHeaderValue; Authorization: AxiosHeaderValue; } & { ...; }>'.
              Types of property '"Content-Length"' are incompatible.
                Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosHeaderValue | undefined' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosHeaderValue | undefined'. Two different types with this name exist, but they are unrelated.
                  Type 'AxiosHeaders' is not assignable to type 'AxiosHeaderValue | undefined'.
                    Type 'AxiosHeaders' is missing the following properties from type 'string[]': length, pop, push, join, and 27 more.
[tsl] ERROR in /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/src/sdk-client.ts(33,49)
      TS2345: Argument of type 'AxiosError<unknown, any>' is not assignable to parameter of type 'AxiosError'.
  Types of property 'config' are incompatible.
    Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any> | undefined' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any> | undefined'. Two different types with this name exist, but they are unrelated.
      Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any>' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").InternalAxiosRequestConfig<any>'. Two different types with this name exist, but they are unrelated.
        Types of property 'headers' are incompatible.
          Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosRequestHeaders' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosRequestHeaders'. Two different types with this name exist, but they are unrelated.
            Type 'AxiosRequestHeaders' is not assignable to type 'Partial<RawAxiosHeaders & { "Content-Length": AxiosHeaderValue; "Content-Encoding": AxiosHeaderValue; Accept: AxiosHeaderValue; "User-Agent": AxiosHeaderValue; Authorization: AxiosHeaderValue; } & { ...; }>'.
              Types of property '"Content-Length"' are incompatible.
                Type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosHeaderValue | undefined' is not assignable to type 'import("/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/axios/index").AxiosHeaderValue | undefined'. Two different types with this name exist, but they are unrelated.
                  Type 'AxiosHeaders' is not assignable to type 'AxiosHeaderValue | undefined'.
                    Type 'AxiosHeaders' is missing the following properties from type 'string[]': length, pop, push, join, and 27 more.
    at /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:23:2001732
    at /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:23:389111
    at Hook.eval [as callAsync] (eval at create (/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:21:81694), <anonymous>:6:1)
    at Hook.CALL_ASYNC_DELEGATE [as _callAsync] (/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:21:78856)
    at Cache.shutdown (/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:23:91529)
    at /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:23:224605
    at Hook.eval [as callAsync] (eval at create (/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:21:81694), <anonymous>:6:1)
    at Hook.CALL_ASYNC_DELEGATE [as _callAsync] (/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:21:78856)
    at Compiler.close (/Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:23:224490)
    at /Users/j.mitard/Downloads/colab-saas-conn-identitynow-orphan-accounts-main/node_modules/@vercel/ncc/dist/ncc/index.js.cache.js:23:2001612

Download again and see if that fixed it.

Hello,
It’s working fine now !
Next step for us is to try to remove access to a user from your connector and see if it applies the same to the original source.

Thanks !

Hello Fernando,
I tried to add my test user into an AD group.
After an AD aggregation and an Orphan account aggregation (your connector), it seems that your connector doesn’t see the correct entitlement associated to the account. Indeed, the entitlement seems to be the account itself (Native Identity ID = entitlement value). I also tested with a Docusign source, same result. Is it expected ?


If you mean that both the account ID and the entitlement ID are equal per account, yes, it’s by design. The ID is the internal system ID of the orphan account in question.

Please confirm this was your point.

It’s not only the ID, it is also the fact that I have no attributes related to the entitlement.
If a want to certify an account from your connector, how can I know how which entitlement I’m going to certify ?

Each entitlement is unique to an account. If you can certify an entitlement is because that entitlement belongs to a particular account and, in turn, an identity if the whole setup was correctly configured. What’s the confusion? Not sure if I’m following you.

Let think about my AD account is member of group A and group B.
I correctly make aggregation on my AD source, then on your connector source.
In the account detail, I still have only one entitlement.

It seems not work as usual where all entitlements an account has are listed within the account and during a certification campaign, I can choose which entitlements I want keep or remove.

Anyway, I test also a certification campaign targeting the account from your connector and with a revoke decision, my AD account is still member of groups.

Hello Fernando,
Have you any ideas regarding my previous comment ?

I’d need screenshots to better understand the issue. I still don’t know if I get it, sorry.