Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

Debug Logs

For information about managing additional source settings, including debug logging and downloading connector logs, refer to Managing Additional Settings.

Test connection reports a token issuance policy error

Resolution - Add the Oracle Access Governance resource and required scope to the confidential application's token issuance policy.

Test connection reports a credentials error, but the client ID and client secret are correct

Resolution - Go to Identity & Security > Domains > your domain > Integrated applications and activate the confidential application from the Actions menu. The status must be Active. OCI IAM creates confidential applications as inactive, and an inactive application does not issue a token.

An operation reports insufficient privileges

Resolution - Assign AG_Administrator, or assign AG_Auditor for a read-only source. Refer to Required Permissions.

Aggregation or provisioning intermittently reports rate limiting

Resolution - The connector retries throttled requests with backoff. If the issue continues, reduce the aggregation frequency.

Test connection reports an unreachable host

Resolution - Verify Service Instance URL and OCI IAM Domain URL, and confirm both services are reachable.

An access request remains pending

Resolution - Review the request in Oracle Access Governance. An approval workflow might be waiting for action, or SailPoint might not have checked the operation yet. If approvals routinely exceed the retry allowance, increase Provisioning Retry Attempts on Provisioning Settings.

Provisioning fails without a reason

Resolution - Open the request in Oracle Access Governance. Check the orchestrated system's connection and most recent data load.

Entitlements aggregate but identities show no access

Resolution - Run an account aggregation after the entitlement aggregation.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.