Issue with Web Services Connector and entitlements

Hello, I’ve been trying to setup a webservices connector in our tenant and I’m having difficulty with the account/entitlment aggregation that doesn’t make any sense compared to previous configurations. Wondering if anyone else has ever had this problem, or if it’s a thing I should open a support ticket for due to buggy behavior.

To start I have a standard webservices connection setup for our FTP product. I am able to aggregate accounts just fine, however, there is no entitlement endpoint, the entitlements are just on the get user endpoint, so i have been trying to get the entitlements from just scanning accounts. however even though the accounts come in just fine entitlements are not.

image

if you look at the account in the identity they are mapping correctly to the schema.

but when you click on an entitlement,

image

I have tried multiple troubleshooting steps, resetting source, unoptimized aggs, schema deletes, changing the entitlement type, going as far as to make a second source to test that it was not a source issue, the same thing is happening, the account aggreagtion is a 2 step agg, first is a get users call to return the list of ids, the child endpoint is then calling get user with the $response.id$.

here is a payload example

here’s the response mapping

here’s the account schema

to me, everything looks correct, the mappings are obviously correct because the accounts list the entitlements, but identityNow is not picking up on them as entitlements to be assigned.

You have selected most of the entitlements as Group type, can you check in Entitlement Types, add attributes for each Group schema object.

Ok, so you’re saying that in the group entitlement type i should have a schema attribute for each of these?

I thought that since they aren’t attributes of a type of entitlement it didn’t matter.

so just to confirm, the schema here should be accountPolicy, enableCom etc?

Just add the attributes you have/expecting in Group (Entitlement) object and run Aggregation.

Unfortunately that doesn’t work either.



no entitlements are being picked up in the source menu, however on the accounts themselves all are present.

For anyone in the future.

I solved this by making a single entitlement type per attribute on the response shown in my opening post. I don’t quite get why this works so anyone with more in depth understanding of entitlementTypes can opine for my sanity, but setting one entitlement type per attribute with an attribute name of the value in the system allowed these to come during account user agg.

image

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.