Oracle EPM Cloud -AR

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Everyone,

I have started working on the “Oracle EPM Cloud -AR” OOTB Connector. As In after providing all the Connection setting details I am facing an error message called “Exception in JWT Token Generation” after performing the “Test Connection”.

Attached the snippets as well.
Please comment if anyone faced the similar issue.

Oracle EPM Cloud -AR
Oracle EPM Cloud -AR2153×642 50.3 KB

Thanks and Regards,
Sai Krishna L

3

Hi @sai_krishna_L ,

Did you find something for this error? Was it from SPM side?

Thanks,

4

Hi @skady,

Still I am facing the issue. I couldn’t get any solution from the SailPoint expert services, just the suggestions they had given but no luck.

Kind regards,
Sai Krishna L

5

Hi @sai_krishna_L ,

Thanks for the info. We are also facing the same issue. Will post here if find any solution.
What type of suggestion they provided; can you share please.

6

Hi @skady,

SailPoint expert services team has suggested to generate the Access token from the below documentation link via postman, but it was for the mobile application. SailPoint documentation recommends to do it with Confidential application.

https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/prest/authentication_oath.html

Kind Regards,
Sai Krishna L

1 Like
7

Hi @sai_krishna_L,

For me the issue is resolved.

Important things to check:

  1. The IDCS URL should be in correct format along with other credentials to generate the JWT token.
  2. The client application should be enabled in the EPM console.
  3. System URL should be in correct format to aggregate the data.

IDCS URL format - https://IDCS_Service_Instance.identity.oraclecloud.com
Sys URL format - https://SERVICE_NAME-TENANTT.epm.dcX.ocs.oraclecloud.com

Refer Integ documentation for more on format.

The method not allowed error possibly indicates that the IDCS URL is not correct.

Let me know if you need further help on the parameters.

Thanks

1 Like
8

Hi @skady,

As you mentioned I rechecked the IDCS URL and System URL the test connection is working fine.

I have a doubt, In case of leaver/access removal, account can be deleted or can be made inactive.

So I tried to remove the access via certification but I had received the below error
“Request to remove all assigned IDCS entitlements of the user was rejected”,“because this will result in deleting the user. \u0027Delete\u0027 the user to achieve the same behaviour.”

I have created the Provisioning policy for the usageType “delete” as well. Even after doing this also I am not able to delete the account.

Any suggestions would be appreciated.

Note : There is a limitation on adding the source in identity profile > provisioning. (this option is not in scope)

Kind Regards,
Sai Krishna L

9

Hi @skady,

Do you have any suggestions or inputs on the above doubt which I have posted earlier.

Kind Regards,
Sai Krishna L

10

Hi @sai_krishna_L ,

Sorry for late response, but I have not configured the access removal part yet. Did you check the troubleshooting guide. The error you showed is part of that guide.

Troubleshooting (sailpoint.com)

11

Hi @skady,

yes I have checked the troubleshooting guide, to remove all assigned IDCS Entitlements of the user I need to delete the user. Could you please suggest the trigger/Provisioning operation to tackle it.

What is the purpose of usageType : DELETE in the Provisioning policy??

Kind Regards,
Sai Krishna L

12

Hi @skady,

Could you please let me know how can we delete the user from the EPM Cloud.

Kind regards,
Sai Krishna L

13

Hi @sai_krishna_L , as per SailPoint, the enable/disable/delete not supported by the connector as of now.
Need to check for alternatives i.e. if removing all the entitlements result in account disablement or delte. Need to check with EPM if any such feature is supported.

1 Like
14

Thanks for the response @skady. Will check with EPM if there is any such feature to disable/delete.

15

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.