lithnet / okta-managementagent Goto Github PK

When trying to modify a multivalued attribute it errors out with a 400 API error

receiving an error: (I am using the same account created in the Okta side as the account running the MIM Synchronization/OktaLithnet Connector.

"System.AggregateException: One or more errors occurred. ---> Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action

at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__171.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__181.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification) at Lithnet.Okta.ManagementAgent.SchemaProvider.<GetSchemaJson>d__4.MoveNext() in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 105 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetSchemaTypeUser(IOktaClient client) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 95 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetMmsSchema(SchemaContext context) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 20 at Lithnet.Ecma2Framework.Ecma2.GetSchema(KeyedCollection2 configParameters) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\obj\Debug\ILTemplate.cs:line 0
---> (Inner Exception #0) Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action

at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__171.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__181.MoveNext()<---
Forefront Identity Manager 4.4.1302.0"
Event Xml:



6801
2
3
0x80000000000000

330119
Application
usmtnpmdinfap17.emrsn.org



System.AggregateException: One or more errors occurred. ---> Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action

at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__171.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__181.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification) at Lithnet.Okta.ManagementAgent.SchemaProvider.<GetSchemaJson>d__4.MoveNext() in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 105 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetSchemaTypeUser(IOktaClient client) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 95 at Lithnet.Okta.ManagementAgent.SchemaProvider.GetMmsSchema(SchemaContext context) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\Providers\SchemaProvider.cs:line 20 at Lithnet.Ecma2Framework.Ecma2.GetSchema(KeyedCollection2 configParameters) in D:\github\lithnet\okta-managementagent\src\Lithnet.Okta.ManagementAgent\obj\Debug\ILTemplate.cs:line 0
---> (Inner Exception #0) Okta.Sdk.OktaApiException: 403: You do not have permission to perform the requested action

at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse1 response) at Okta.Sdk.Internal.DefaultDataStore.<GetAsync>d__171.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at Okta.Sdk.OktaClient.<GetAsync>d__181.MoveNext()<---
Forefront Identity Manager 4.4.1302.0

On latest build

When a delete of managerId goes out..

2018-06-07 09:16:28.4863|[3418]| INFO|Starting export
2018-06-07 09:16:28.6403|[3418]| INFO|Setting up connection to https://XXXXXX.oktapreview.com
2018-06-07 09:16:29.0593|[3418]| INFO|Performing export for XXXXXX
2018-06-07 09:16:29.1064|[3418]| INFO|Update managerId -> <null>
2018-06-07 09:16:29.4624|[3542]|TRACE|POST api/v1/users/XXXXXX
2018-06-07 09:16:31.7006|[59]|TRACE|200 /api/v1/users/XXXXXX00:00:02.2317465
2018-06-07 09:16:31.8226|[3418]|TRACE|Export of XXXXXX took 00:00:02.7559025
2018-06-07 09:16:31.8356|[3418]| INFO|Closing export connection: Normal
2018-06-07 09:16:31.8356|[3418]| INFO|Export operation complete
2018-06-07 09:16:31.8356|[3418]| INFO|Exported 1 objects
2018-06-07 09:16:31.8356|[3418]| INFO|Export duration: 00:00:02.8351054
2018-06-07 09:16:31.8356|[3418]| INFO|Speed: 0.35 obj/sec
2018-06-07 09:16:31.8356|[3418]| INFO|Average: 2.84 sec/obj

On an Import the managerId is back.. not deleted and thus MIM sees it as exported-change-not-reimported.

Not sure if bug or API error or a combination or rate limit or something

When exporting updates to about 3500 updates.. it gave a 502 API error after exact 1900 users

An error occurred deserializing the error body for response code 502. See the inner exception for details.

System.InvalidOperationException: An error occurred deserializing the error body for response code 502. See the inner exception for details. ---> Newtonsoft.Json.JsonReaderException: Unexpected character encountered while parsing value: <. Path '', line 0, position 0.
   at Newtonsoft.Json.JsonTextReader.ParseValue()
   at Newtonsoft.Json.JsonReader.ReadForType(JsonContract contract, Boolean hasConverter)
   at Newtonsoft.Json.Serialization.JsonSerializerInternalReader.Deserialize(JsonReader reader, Type objectType, Boolean checkAdditionalContent)
   at Newtonsoft.Json.JsonSerializer.DeserializeInternal(JsonReader reader, Type objectType)
   at Newtonsoft.Json.JsonSerializer.Deserialize[T](JsonReader reader)
   at Okta.Sdk.Internal.DefaultSerializer.Deserialize[T](String input)
   at Okta.Sdk.Internal.DefaultSerializer.Deserialize(String json)
   at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse`1 response)
   --- End of inner exception stack trace ---
   at Okta.Sdk.Internal.DefaultDataStore.EnsureResponseSuccess(HttpResponse`1 response)
   at Okta.Sdk.Internal.DefaultDataStore.<PutAsync>d__20`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult()
   at Okta.Sdk.OktaClient.<PutAsync>d__28`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult()
   at Okta.Sdk.UsersClient.<UpdateUserAsync>d__6.MoveNext()

MA Logs of that time

2018-05-25 17:51:24.6346|[39]|TRACE|PUT api/v1/users/xxxxxx
2018-05-25 17:51:24.9247|[540]|TRACE|200 /api/v1/users/xxxxx
2018-05-25 17:51:24.9247|[4]|TRACE|Export of xxxxxx took 00:00:03.7493234
2018-05-25 17:51:25.9052|[540]|TRACE|200 /api/v1/users/xxxxxx
2018-05-25 17:51:25.9052|[39]|TRACE|Export of xxxxxx took 00:00:03.3618225
2018-05-25 17:51:26.5380|[4]| INFO|Closing export connection: Normal
2018-05-25 17:51:26.5390|[4]| INFO|Export operation complete
2018-05-25 17:51:26.5390|[4]| INFO|Exported 1900 objects
2018-05-25 17:51:26.5390|[4]| INFO|Export duration: 00:35:09.1778717
2018-05-25 17:51:26.5390|[4]| INFO|Speed: 0 obj/sec
2018-05-25 17:51:26.5390|[4]| INFO|Average: 1.11009361668421 sec/obj
2018-05-25 17:51:27.5781|[539]| INFO|Starting delta import