Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

Provisioning fails with the following error message:

Resource 'User' is malformed – Attribute urn:scim:schemas:core:1.0:alias is not defined for resource User

Resolution – Add alias attribute in skipSchemaAttributes list, which is not supported by SCIM server.

Create account fails for Salesforce SCIM server with the following error message:

REQUIRED_FIELD_MISSING:user_must_have_one_entitlement_which_must_be_a_profileid;

Resolution – While performing create any new account with Manage User Access, select at least one valid entitlement .

The create account operation fails even though the recommended attribute mappings are used in the Account Policy.

Resolution – Ensure that the managed system is enabled to set the account attributes used by the Account Policy, then try the Create account operation again.

Test Connection fails for Salesforce SCIM server with the following error message:

com.unboundid.scim.sdk.UnauthorizedException: Unauthorized

Test Connection fails due to the OAuth 2.0 bearer token generated from other machine.

Resolution – For OAuth 2.0 type of authentication, use the OAuth2 bearer token generated on the machine where IdentityIQ is hosted.

Account and entitlement aggregation failed with following exception:

Exceptionduringaggregation.Reason:javax.ws.rs.

ProcessingException:Errorclosingmessagecontentinputstream

Resolution – Add the connector_enableDefaultConnectorProvider key in the source XML using APIs.

Note
For more information on SailPoint's REST APIs, refer to Best Practices: REST API Authentication and REST API - Update Source (Partial) in the SailPoint Developer Community.