Webservices connector, this entitlement does not exist

Hello

I am adding a business role to a user which has an entitlement on it. I see the error/warning below . When I refresh the identity an account is not created. Am I missing a config?

Thanks in advance for all/any help.

image

Unfortunately, this is not much to go on. Can you please share more info like log outputs, app config, etc.?

Thanks for responding.
I am not seeing anything in the logs. The app config is attached. I am able to connect. I can create users with the same call externally in python.

I’ve added headers to the create config and the following json just to see if I can get it to work when manually adding the role and refreshing the user.

{
"loginName": "abcd2234",
"meip": True,
"mgip": True,
"NormalizedUserName": "abcd2234",
"emailVerificationState": "0",
"LoginPassword": "superSecret"
}

#IT role config
image

##application config

What version of IIQ are you on? If it’s a pretty recent one, you might want to test out the cURL Command version and see if you can get that to work.

Also, to hopefully help narrow down the issue, you can put the connector package on trace logging:

logger.webservicesconnector.name=sailpoint.connector.webservices
logger.webservicesconnector.level=trace

HI @Seadog
Please provide with more info. As Brian mentioned enable the loggers and check whats the exact API call triggering. You can even use the beforeRule to see exactly what is being send by checking the requestEndpoint.
From the screenshot it looks like it is unable to verify entitlement in target. This could be happening because of two reasons.

  • The request is completed without any errors, but entitlement is not added in the target application.
  • The Schema mapping of the application is not properly configured and hence it is unable to verify the access added to the user.

Is the user added to the system? If so verify the response attribute mapping with application schema.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.