Oracle NetSuite - Prov

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

I’m constantly getting the following error when trying to create a NetSuite account:

sailpoint.connector.ConnectorException: [ ConnectorException ] [ Error details ] The server encountered an unexpected error while contacting target system. Please check the logs.An object named 'Exception occurred in setEmployee USER_ERROR:Please enter value(s) for: Employee location, Type' was not found.

I tried with several attributes technical names and values in the account profile creation but no one works. The following are some examples:

  • Type, TYPE, employeeType, employeetype, type … with values: 5, Intern

  • custentitycustentity_xyz_employee_lo, location, Location .. with values: Berlin, 5

The “Employee Location” is configured as following:

image
image1643×428 16.3 KB

image
image1561×430 64.9 KB

For the employees types:

image
image317×200 2.39 KB

I also defined the following:

image
image1164×307 17.7 KB

Could you please help me with this ?

Thank you

2

I have little experience with this specific connector, but have run into the issue where it’s not very well documented which attributes are available or how to set them.

Have you reviewed the WSDL from Oracle NetSuite?
https://webservices.netsuite.com/wsdl/v2019_1_0/netsuite.wsdl
Or specifically for the employeeType:
https://webservices.netsuite.com/xsd/lists/v2019_1_0/employeeTypes.xsd

Are you able to successfully aggregate those attributes?

3

Hi @sauvee,

I’m unable to perform API calls from SOAP, and getting all time an error: “BaseRef is an abstract type and cannot be instantiated”.

From IdentityNow, I’m aggregating the type by defining the attribute “Type”
image

Thank you

4

Can you share a bit about the setup you’re using to test or troubleshoot this?

5

For testing, I defined attributes in the “Create account” as following and tested different values:

image
image610×172 4.9 KB

image
image451×182 3.99 KB

As previously mentioned, I also tried with other technical attribute names by updating the source with /v3/sources/sourceID/provisioning-policies/CREATE

Account schema:

image

Source / Additional settings:

image
image1164×307 17.7 KB

6

What are the values you are getting back from Oracle when running an aggregation, assuming you do get any values back?

7

I’m only getting values for “Type”:

image

However, the provisioning doesn’t work with one of the values above and “Type”.

For the location, I’m unable to aggregate values

8

These seem like mapped values to make it ‘human readable’, but are really something else.

Is there a way to obtain the raw SOAP response? Then you could use that to determine what / how to send the information. Oracle Documentation is horrible I see (as usual) and documentation on the SailPoint side doesn’t help much either.

9

Hi @sauvee,

I’m not allowed to perform SOAP requests. I asked Oracle support to help me on it.
In the meantime, could you please confirm if there is another action to perform other than adding the custom attribute to the account schema.
Indeed, in the SailPoint doc Custom Attributes, it has been mentioned to add the customAttribute to the source. Is it the same thing ? Are they talking about the configuration of “Additional Attribute Mapping” of the CustomAttribute to the Schema Attribute ?

thank you so much for your help

10

If you want additional attributes, you need to do two things:

  1. Map the attribute in the custom attributes setting of the source config
  2. Add the attribute in the schema of the source

Both need to be done if you want the attribute to show up.

1 Like
11

Thank you for confirmation. I thought I also need to add the custom attributes to the source attributes by API call.

12

Hello,

I’m now able to get values for the location and employee type. However, I’m still getting same error for provisioning by pushing values (i.e Nicosia/Full time) or internalIds (i.e 3 / 6).

The following is how attributes are defined in POST request creating the record in NS:

image
image863×105 4.58 KB

image
image1120×178 7.36 KB

Any idea how to resolve this?

Thanks

13

Can you please provide account schema for this connector? I like to understand how these 2 attributes are defined in account schema (assuming you have no issue retrieving these 2 attributes from NetSuite on aggregation.

14

Hi @ralph-mishiev,

The following is how both attributes are defined in the account schema:

image
image1838×124 3.88 KB

image

I’ve defined the xpaths as following:

image
image783×273 6.45 KB

  • listEmp:employeeType/platformCore:name

  • listEmp:customFieldList/platformCore:customField[@scriptId=‘custentitycustentity_iponweb_employee_lo’]/platformCore:value

The following is the account attributes values:

image
image593×126 2.16 KB

Thank you

15

That looks correct to me. Can you please send me screenshot for “Create Account” screen in IdentityNow source page (assuming you trying as static values for now)

16

Thank you @ralph-mishiev , I sent you the info

17

I have played around in NetSuite app and was able to recreate your original error message( Exception occurred in setEmployee USER_ERROR:TypeError: ..) - when I remove edit permission to employee record. Try checking with whoever supports NetSuite in your org to make sure you have edit permissions on employee records.

1 Like
18

Hello @fatimahm Are you able to resolve the issue? I am facing similar issue where I am able to read addition attributes but provisioning not working for them.

19

@ralph-mishiev Thank you so much for your help. Indeed, “Edit” level has already been there, both for “Employee” and “Employee record”. I requested to update it to “Full” as recommanded by SP doc. I couldn’t check it by myself since I hadn’t access to this part.I hope this will solve the issue.

@poojapal0204 I’ll keep you updated regarding the above. Do not hesitate to check also the permission levels :slight_smile:

20

Thanks @fatimahm I am able to read those additional attributes but they are just not getting added to SOAP request. We do have all the required permissions set.