Issue with SCIM 2.0 Integration: /Entitlements Endpoint Not Being Invoked by SailPoint

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

I am currently facing an issue with the SCIM 2.0 integration for my application. SailPoint is successfully making calls to the /ResourceTypes , /Users , and /Groups endpoints; however, it is not making any calls to the /Entitlements endpoint, even though the /ResourceTypes response includes the definition for Entitlement .
Here is the relevant part of my /ResourceTypes response:

{
    "totalResults": 3,
    "itemsPerPage": 3,
    "startIndex": 1,
    "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:ListResponse"
    ],
    "Resources": [
        {
            "id": "User",
            "name": "User",
            "endpoint": "/Users",
            "description": "User Account",
            "schema": "urn:ietf:params:scim:schemas:core:2.0:User"
        },
        {
            "id": "Group",
            "name": "Group",
            "endpoint": "/Groups",
            "description": "Groups Account",
            "schema": "urn:ietf:params:scim:schemas:core:2.0:Group"
        },
        {
            "id": "Entitlement",
            "name": "Entitlement",
            "endpoint": "/Entitlements",
            "description": "Entitlement Account",
            "schema": "urn:ietf:params:scim:schemas:core:2.0:Entitlement",
            "meta": {
                "location": "ResourceTypes/Entitlement",
                "resourceType": "ResourceType",
                "supportsEntitlements": true
            }
        }
    ]
}
2

Hi @praveenyadav117 ,
Can you elaborate your use case?

  • If you are trying to query Entitlements through ISC, Ensure that Entitlement mappings are right
  • Manually test the API from Postman and see if you are receiving any response!
  • Enable the connector logs which would give you more insight of what the issue is!

Hope this helps!!

3

hi @Prashanth0707 from I am configuring my connectors url and token and then sailpoint suppose to make /Entitlements call along with /Users , /Groups , /ResourceTypes , /Schemas . it is making all the call except the /Entitlements I am checking logs and through postman as ell from postman it is working fine and in logs every other call working fine giving desired result but /Entitlements call itself not happening from SailPoint .

4

Hi @praveenyadav117 - My understanding is the SCIM connector can aggregate users and groups (with associated endpoints). Not sure it can deal with another end point for Entitlements. Where would that get configured?

5

hi @j_place Yes SCIM connectors aggregate Users and Groups but it does through Sailpoint configuration sailpoint makes call to every endpoint present in /ResourceTypes and /Schemas call to connectors and it get Entitlemments or Roles as well , Sailpoint making that request to Many of our SCIM connectors and populating Schemas but for this case I am facing this issue where it is not making the call.

6

Thanks @praveenyadav117, good to know. Do you get a successful reponse from:

  • /Schemas/urn:ietf:params:scim:schemas:core:2.0:Entitlement
7

@j_place yes you will get the response from it.

8

Hi @praveenyadav117 Could it be the supportsEntitlements sub-attribute of the meta attribute? Looks to be non standard to me, so maybe ISC isn’t able to parse that resourceType?