What URL should be used to have Axonius connect to IdentityIQ using OAuth2 authentication using SCIM connector

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

IIQ 8.X (8.1P3)

Share all details about your problem, including any error messages you may have received.

  • IIQ created an API Authentication creds (Client ID and secret) and shared with Axonius team. Also created a proxy user and provided the ReadOnly capabilities to this proxy user using a custom capability (subset of OOTB SCIM connector). Proxy user can read only accounts, roles and entitlements

  • Axonius is trying to connect to SailPoint dev instance thru their adapter and are getting the below errors.

  • First they tried using
    url: https://sailpointiiqdev.company.net/
    client id:
    client secret:
    Error: Error while trying to connect to above url id:67857f6353b17403b756dc9b. Target host not found. Status Code: 404.
    Not sure what is this id value and where it is coming from.

  • Second: After checking API documentation, tried the below
    url: https://sailpointiiqdev.company.net/identityiq/scim/v2/accounts
    client id:
    client secret:
    Error: Error while trying to connect to above url id:67857f6353b17403b756dc9b. Target host not found. Status Code: 404…
    Not sure what is this id value and where it is coming from.

Third: They tried changing the url slightly as as shown below and got the below error
url: “…/sailpointiiqdev.company.net/scim/v2/accounts”
client id:
client secret:
Error:Error while trying to connect to above url id:67857f6353b17403b756dc9b. Authentication Error. Please verify your credentials. Status Code: 401.
Credentials are fine, again it is showing the same id as before and 401 error.

So what should be the correct URL to be used by Axonius to connect to sailpoint using oauth2 authentication mechanism. Please advise. thank you

3

Hi @mah1sp,

I think the problem is on the version of your environment. The documentation refers on IIQ 8.3 and it could possible your version have a differfent structo of the call but i cant find the documentation for 8.1 or the OAuth2 is not supported, but i am not sure at all.

In every I suggest update your IIQ.

4

Thank you Emanuele for your quick response. Yes we are working on upgrading our version and this will take sometime. This Axonius integration is something urgent from the management and we are exploring different ways to connect to IIQ 8.1. Yes, even i am unable to find any SCIM api reference guide for 8.1 version. Appreciate your help.

5

@mah1sp : I have worked on integration between Axonius and SailPoint both ways. Do connect in the future if you are looking for any assistance.

6

Thank you @Saket95606 for your response. We have 8.1p3 version and axonius team is trying to connect to IIQ using OAuth2 authentication using the URLs mentioned in my first message. Can you pls confirm if we are using the right URLs and if anything else needs to be done on Axonius end or IIQ end for the connection to work.

7

Dear Mahesh, We were on version 8.3 P3, and using the below documentation, we were able to complete the integration successfully.

Make sure connectivity is established between both servers use commands like, wget “Sailpoint url” to check connectivity.

Document Link:
Asset Management for SailPoint IdentityIQ | Axonius

8

Thank you @Saket95606. We have the same doc from Axonius, however it is referring to IIQ version 8.3, while we are still in 8.1p3. Do you by any chance have the SCIM API reference doc for 8.1 version and also do you know if Axonius can connect to 8.1 version using OAuth2 authentication.
Also we will check the connectivity using wget command. thanks

9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.