[midPoint] Google Apps Connector

[Nicolas Rossi]

Have you tried to configure the groups associations on this connector ? It
is not as easy as with other resources since Google defines a new entity
for the relationship User-Group which includes the assignment type (i.e.
owner, member). There is no information how to do that on the sample
resource.

Regards,



Ing Nicolás Rossi
Identicum S.A.
Jorge Newbery 3226
Tel: +54 (11) 4552-3050
www.identicum.com


On Tue, May 29, 2018 at 11:18 AM Alexandre Zia <alexandre.zia at ifood.com.br>
wrote:

> Hi,
>
> I've found what has happened.
>
> We ran out of licenses in Google Apps, and for all accounts Midpoint tried
> to create in google while out of licenses midpoint has created a faulty
> shadow Google Apps account.
> Then when I was trying to reconciliate these accounts for some reason it
> was not passing the email correctly in the create user API
>
> So I had to find all of these faulty google apps shadow and delete
> manually, then reconciliate and Midpoint was able to create the account in
> google and related good shadow account
>
> Now we have to monitor closely our available licenses in google and never
> run out of licenses again, to avoid such situation in Midpoint.
>
> Regards
> Alexandre
>
>
>
>
> On Tue, May 29, 2018 at 9:47 AM, Nicolas Rossi <nrossi at identicum.com>
> wrote:
>
>> Hi Alexandre, we are also working with this connector but we still have
>> some issues (with groups associations). We didn't experience this kind of
>> error but it seems that the connector is not sending the email. Can you
>> check if the user being synchronized has a valid email ?
>>
>> Kind regards,
>>
>>
>> Ing Nicolás Rossi
>> Identicum S.A.
>> Jorge Newbery 3226
>> Tel: +54 (11) 4552-3050
>> www.identicum.com
>>
>>
>> On Mon, May 28, 2018 at 10:05 PM Alexandre Zia <
>> alexandre.zia at ifood.com.br> wrote:
>>
>>> Hello
>>>
>>>  Is Google Apps connector stable and reliable?
>>> https://wiki.evolveum.com/display/midPoint/Google+Apps+Connector
>>>
>>>  Is there any other Google apps connector that works better?
>>>
>>> I'm trying to use it, but cant make it work propperly.
>>> It fails to create accounts, then sometimes it create but I can't see a
>>> reason for this behaviour
>>>
>>> Always this error:
>>>
>>> 2018-05-29 00:52:33,667 [] [http-nio-127.0.0.1-8080-exec-9] ERROR
>>> (com.evolveum.midpoint.provisioning.ucf.impl.connid.ConnIdUtil): ConnId
>>> Exception
>>> org.identityconnectors.framework.common.exceptions.RetryableException in
>>> connector:10a4f0a9-b0b1-47fd-b84e-1922c0ee89ed(ConnId
>>> com.evolveum.polygon.connector.googleapps.GoogleAppsConnector
>>> v1.4.2.18-SNAPSHOT):
>>> ConnectorSpec(resource:88fcd699-6a81-46d8-8b71-37bcee02d492(Google Apps),
>>> name=null, oid=10a4f0a9-b0b1-47fd-b84e-1922c0ee89ed): 400 Bad Request
>>> {
>>>   "code" : 400,
>>>   "errors" : [ {
>>>     "domain" : "global",
>>>     "location" : "[resource.email.field[0].Value]",
>>>     "locationType" : "parameter",
>>>     "message" : "Required parameter: [resource.email.field[0].Value]",
>>>     "reason" : "required"
>>>   } ],
>>>   "message" : "Required parameter: [resource.email.field[0].Value]"
>>> }
>>> org.identityconnectors.framework.common.exceptions.RetryableException:
>>> 400 Bad Request
>>> {
>>>   "code" : 400,
>>>   "errors" : [ {
>>>     "domain" : "global",
>>>     "location" : "[resource.email.field[0].Value]",
>>>     "locationType" : "parameter",
>>>     "message" : "Required parameter: [resource.email.field[0].Value]",
>>>     "reason" : "required"
>>>   } ],
>>>   "message" : "Required parameter: [resource.email.field[0].Value]"
>>> }
>>>     at
>>> org.identityconnectors.framework.common.exceptions.RetryableException.wrap(RetryableException.java:101)
>>> .
>>> .
>>> .
>>> .
>>>
>>> Caused by:
>>> com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad
>>> Request
>>> {
>>>   "code" : 400,
>>>   "errors" : [ {
>>>     "domain" : "global",
>>>     "location" : "[resource.email.field[0].Value]",
>>>     "locationType" : "parameter",
>>>     "message" : "Required parameter: [resource.email.field[0].Value]",
>>>     "reason" : "required"
>>>   } ],
>>>   "message" : "Required parameter: [resource.email.field[0].Value]"
>>> }
>>>     at
>>> com.google.api.client.googleapis.json.GoogleJsonResponseException.from(GoogleJsonResponseException.java:146)
>>>
>>>
>>> I have recreated the resource several times form the sample XML but same
>>> problem.
>>>
>>>
>>>
>>>
>>> --
>>>
>>> ​Alexandre Roberto Zia​
>>>
>>> *​Security*
>>>
>>> *TEL:* +55 (11) 3634-3360
>>>
>>> www.ifood.com.br
>>>
>>>
>>>
>>>
>>> <https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8>
>>> <https://play.google.com/store/apps/details?id=br.com.brainweb.ifood>
>>> <https://www.facebook.com/iFood?fref=ts> <https://twitter.com/iFood>
>>> _______________________________________________
>>> midPoint mailing list
>>> midPoint at lists.evolveum.com
>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
>
> --
>
> ​Alexandre Roberto Zia​
>
> *​Security*
>
> *TEL:* +55 (11) 3634-3360
>
> www.ifood.com.br
>
>
>
>
> <https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8>
> <https://play.google.com/store/apps/details?id=br.com.brainweb.ifood>
> <https://www.facebook.com/iFood?fref=ts> <https://twitter.com/iFood>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180529/9a1c2065/attachment.htm>