lithnet / okta-managementagent Goto Github PK
View Code? Open in Web Editor NEWOkta management agent for Microsoft Identity Manager
Okta management agent for Microsoft Identity Manager
When trying to modify a multivalued attribute it errors out with a 400 API error
receiving an error: (I am using the same account created in the Okta side as the account running the MIM Synchronization/OktaLithnet Connector.
"System.AggregateException: One or more errors occurred. ---> Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action
at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__17
1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__18
1.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification) at Lithnet.Okta.ManagementAgent.SchemaProvider.<GetSchemaJson>d__4.MoveNext() in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 105 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetSchemaTypeUser(IOktaClient client) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 95 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetMmsSchema(SchemaContext context) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 20 at Lithnet.Ecma2Framework.Ecma2.GetSchema(KeyedCollection
2 configParameters) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\obj\Debug\ILTemplate.cs:line 0
---> (Inner Exception #0) Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action
at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__17
1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__18
1.MoveNext()<---
Forefront Identity Manager 4.4.1302.0"
Event Xml:
6801
2
3
0x80000000000000
330119
Application
usmtnpmdinfap17.emrsn.org
System.AggregateException: One or more errors occurred. ---> Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action
at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__17
1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__18
1.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification) at Lithnet.Okta.ManagementAgent.SchemaProvider.<GetSchemaJson>d__4.MoveNext() in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 105 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetSchemaTypeUser(IOktaClient client) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 95 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetMmsSchema(SchemaContext context) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 20 at Lithnet.Ecma2Framework.Ecma2.GetSchema(KeyedCollection
2 configParameters) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\obj\Debug\ILTemplate.cs:line 0
---> (Inner Exception #0) Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action
at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__17
1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__18
1.MoveNext()<---
Forefront Identity Manager 4.4.1302.0
On latest build
When a delete of managerId goes out..
2018-06-07 09:16:28.4863|[3418]| INFO|Starting export
2018-06-07 09:16:28.6403|[3418]| INFO|Setting up connection to https://XXXXXX.oktapreview.com
2018-06-07 09:16:29.0593|[3418]| INFO|Performing export for XXXXXX
2018-06-07 09:16:29.1064|[3418]| INFO|Update managerId -> <null>
2018-06-07 09:16:29.4624|[3542]|TRACE|POST api/v1/users/XXXXXX
2018-06-07 09:16:31.7006|[59]|TRACE|200 /api/v1/users/XXXXXX00:00:02.2317465
2018-06-07 09:16:31.8226|[3418]|TRACE|Export of XXXXXX took 00:00:02.7559025
2018-06-07 09:16:31.8356|[3418]| INFO|Closing export connection: Normal
2018-06-07 09:16:31.8356|[3418]| INFO|Export operation complete
2018-06-07 09:16:31.8356|[3418]| INFO|Exported 1 objects
2018-06-07 09:16:31.8356|[3418]| INFO|Export duration: 00:00:02.8351054
2018-06-07 09:16:31.8356|[3418]| INFO|Speed: 0.35 obj/sec
2018-06-07 09:16:31.8356|[3418]| INFO|Average: 2.84 sec/obj
On an Import the managerId is back.. not deleted and thus MIM sees it as exported-change-not-reimported.
Not sure if bug or API error or a combination or rate limit or something
When exporting updates to about 3500 updates.. it gave a 502 API error after exact 1900 users
An error occurred deserializing the error body for response code 502. See the inner exception for details.
System.InvalidOperationException: An error occurred deserializing the error body for response code 502. See the inner exception for details. ---> Newtonsoft.Json.JsonReaderException: Unexpected character encountered while parsing value: <. Path '', line 0, position 0.
at Newtonsoft.Json.JsonTextReader.ParseValue()
at Newtonsoft.Json.JsonReader.ReadForType(JsonContract contract, Boolean hasConverter)
at Newtonsoft.Json.Serialization.JsonSerializerInternalReader.Deserialize(JsonReader reader, Type objectType, Boolean checkAdditionalContent)
at Newtonsoft.Json.JsonSerializer.DeserializeInternal(JsonReader reader, Type objectType)
at Newtonsoft.Json.JsonSerializer.Deserialize[T](JsonReader reader)
at Okta.Sdk.Internal.DefaultSerializer.Deserialize[T](String input)
at Okta.Sdk.Internal.DefaultSerializer.Deserialize(String json)
at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse`1 response)
--- End of inner exception stack trace ---
at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse`1 response)
at Okta.Sdk.Internal.DefaultDataStore.<PutAsync>d__20`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult()
at Okta.Sdk.OktaClient.<PutAsync>d__28`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult()
at Okta.Sdk.UsersClient.<UpdateUserAsync>d__6.MoveNext()
MA Logs of that time
2018-05-25 17:51:24.6346|[39]|TRACE|PUT api/v1/users/xxxxxx
2018-05-25 17:51:24.9247|[540]|TRACE|200 /api/v1/users/xxxxx
2018-05-25 17:51:24.9247|[4]|TRACE|Export of xxxxxx took 00:00:03.7493234
2018-05-25 17:51:25.9052|[540]|TRACE|200 /api/v1/users/xxxxxx
2018-05-25 17:51:25.9052|[39]|TRACE|Export of xxxxxx took 00:00:03.3618225
2018-05-25 17:51:26.5380|[4]| INFO|Closing export connection: Normal
2018-05-25 17:51:26.5390|[4]| INFO|Export operation complete
2018-05-25 17:51:26.5390|[4]| INFO|Exported 1900 objects
2018-05-25 17:51:26.5390|[4]| INFO|Export duration: 00:35:09.1778717
2018-05-25 17:51:26.5390|[4]| INFO|Speed: 0 obj/sec
2018-05-25 17:51:26.5390|[4]| INFO|Average: 1.11009361668421 sec/obj
2018-05-25 17:51:27.5781|[539]| INFO|Starting delta import
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.