Update Account Error code : 401 on CyberArk Privilege Cloud Shared Services

Hello everyone!
We are trying to integrate CyberArk Privileged Cloud Shared Services with IdentityNow.
So far we managed to connect and add accounts.
However, we tried to sync an attribute from IdentityNow and received the following error:

[“openconnector.InvalidConfigurationException: [ InvalidConfigurationException ] \n [ Possible suggestions ] Please check OAuth2 Token \n [ Error details ] Error while performing operation : Update Account Error code : 401 {"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"status":"401","detail":"You are not authorized to perform this operation. Please contact your IT helpdesk."}”]

We are following the CyberArk documentation referenced by IdentityNow. We already made sure that the SCIM user has the “ Role Management” and “ User Management” permissions. Even the user has the right to “Vault Management”.

Are there any settings we are missing?
Thanks in advance,
Regards.

What attribute are you trying to sync?

I’m trying to sync
name.givenName

Have you tried using postman or any other tool to see if it works outside of ISC?

Not yet. What we did to rule out the SCIM User privilege issue, was to temporarily assign full privileges to the user (System Adminstrator).
This worked and allowed to synchronize the attribute.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.