Hello,
i am using SCIM driver to provision users to Hoxhunt (Cloud Application).
In the matching policy I have the matching rule:
<rule> <description>Match User</description> <conditions> <and> <if-class-name mode="nocase" op="equal">User</if-class-name> </and> </conditions> <actions> <do-find-matching-object scope="subtree"> <arg-match-attr name="snbCloudID"> <arg-value type="string"> <token-join> <token-split delimiter=" "> <token-src-attr name="snbCloudID"/> </token-split> </token-join> </arg-value> </arg-match-attr> </do-find-matching-object> </actions> </rule>
The attribute snbCloudID of user in Identity Vault is mapped to externalId in Hoxhunt.
<attr-name class-name="User"> <nds-name>snbCloudID</nds-name> <app-name>externalId</app-name> </attr-name>
Trying to match an existing user thows the error:
Message: Code(-9062) Multiple matches found by object matching policy: 668270b0d1b3076e64dfdeee, 668270b0d1b3076e64dfdeee.
The driver runs in a remote loader und in the remote loader can be seen:
DirXML: [07/01/24 11:03:36.97]: TRACE: : {"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults":1,"Resources":[{"id":"668270b0d1b3076e64dfdeee","schemas":["urn:ietf:params:scim:schemas:core:2.0:User","urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"],"meta":{"resourceType":"User","location":"https:\/\/app.hoxhunt.com\/services\/scim\/Users\/668270b0d1b3076e64dfdeee","created":"2024-07-01T09:02:40.602Z"},"userName":"Vjmna.Yqruryyn@devsnb.ch","name":{"givenName":"Vjmna","familyName":"Yqruryyn"},"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User":{"department":"3","division":"OE Zentrale IT Services","manager":null},"preferredLanguage":"de","addresses":[{"primary":true,"type":"work","country":null,"locality":"ZH"}],"emails":[{"primary":true,"type":"work","value":"Vjmna.Yqruryyn@devsnb.ch"}],"phoneNumbers":[{"primary":true,"type":"work","value":null}],"active":true,"externalId":"20yfcd","urn:ietf:params:scim:schemas:extension:hoxhunt:2.0:User":{"customAttribute1":"F","customAttribute2":"blabla2","customAttribute3":null,"customAttribute4":null,"customAttribute5":null,"customAttribute6":null,"customAttribute7":null,"customAttribute8":null,"customAttribute9":null,"customAttribute10":null}}]}
....
DirXML: [07/01/24 11:03:37.01]: TRACE: <nds dtdversion="2.0" ndsversion="8.x">
<source>
<product build="20221116_0247" instance="Hoxhunt SCIM" version="1.0.1.0300">Identity Manager SCIM Driver</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="urn:ietf:params:scim:schemas:core:2.0:User" event-id="0">
<association state="associated">668270b0d1b3076e64dfdeee</association>
</instance>
<instance class-name="urn:ietf:params:scim:schemas:core:2.0:User" event-id="0">
<association state="associated">668270b0d1b3076e64dfdeee</association>
</instance>
<status event-id="0" level="error" type="driver-general">
<description>java.lang.ClassCastException: com.fasterxml.jackson.databind.node.NullNode cannot be cast to com.fasterxml.jackson.databind.node.ObjectNode</description>
</status>
<status event-id="0" level="success"/>
</output>
</nds>
While DriverShim is returning the output instance twice, although the total results of REST call is one?
Does anyone has experienced the same driver behavior? Is this a bug?
Thanks a lot!
Best regards,
Evanela
Support
Documentation
Learning Services
Partner Programs
