# Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

- [SailPoint Identity Services Documentation](<https://documentation.sailpoint.com/saas/help/index.html>)
- [SailPoint Support Knowledge Base](<https://support.sailpoint.com/csm?id=kb_view2&amp;kb_id=05ff44289f011200550bf7b6077fcfa3>)
- [SailPoint Developer Community](<https://developer.sailpoint.com/>)

## Debug Logs

For information about managing additional source settings, including debug logging and downloading connector logs, refer to [Managing Additional Settings](<https://documentation.sailpoint.com/saas/help/sources/managing_additional_settings.html>).

## Test connection reports a token issuance policy error

**Resolution** - Add the Oracle Access Governance resource and required scope to the confidential application's token issuance policy.

## Test connection reports a credentials error, but the client ID and client secret are correct

**Resolution** - Go to **Identity &amp; Security \> Domains \> your domain \> Integrated applications** and activate the confidential application from the **Actions** menu. The status must be **Active**. OCI IAM creates confidential applications as inactive, and an inactive application does not issue a token.

## An operation reports insufficient privileges

**Resolution** - Assign `AG_Administrator`, or assign `AG_Auditor` for a read-only source. Refer to [Required Permissions](<https://documentation.sailpoint.com/connectors/oracle/access_governance/saas/help/index.html#required-permissions>).

## Aggregation or provisioning intermittently reports rate limiting

**Resolution** - The connector retries throttled requests with backoff. If the issue continues, reduce the aggregation frequency.

## Test connection reports an unreachable host

**Resolution** - Verify **Service Instance URL** and **OCI IAM Domain URL**, and confirm both services are reachable.

## An access request remains pending

**Resolution** - Review the request in Oracle Access Governance. An approval workflow might be waiting for action, or SailPoint might not have checked the operation yet. If approvals routinely exceed the retry allowance, increase **Provisioning Retry Attempts** on [Provisioning Settings](<https://documentation.sailpoint.com/connectors/oracle/access_governance/saas/help/connecting.html#provisioning-settings>).

## Provisioning fails without a reason

**Resolution** - Open the request in Oracle Access Governance. Check the orchestrated system's connection and most recent data load.

## Entitlements aggregate but identities show no access

**Resolution** - Run an account aggregation after the entitlement aggregation.