[midPoint] Google Apps Connector

Tue May 29 16:57:48 CEST 2018

Not yet,

I just finished configure the creation of OrgUnits in Google and now
working on automatically sync google's Org tree with my Midpoint Org tree
Groups is in my backlog to be done yet.

Now Google API quota limits are preventing me to continue, I've filled a
quota raise requirement and they are asking thousands of questions on how
my application works and I'm trying to make them understand that I'm using
a component that I don't know exactly how it works internally (Google Apps
Connector)

Regards

On Tue, May 29, 2018 at 11:26 AM, Nicolas Rossi <nrossi at identicum.com>
wrote:

> Have you tried to configure the groups associations on this connector ? It
> is not as easy as with other resources since Google defines a new entity
> for the relationship User-Group which includes the assignment type (i.e.
> owner, member). There is no information how to do that on the sample
> resource.
>
> Regards,
>
>
>
> Ing Nicolás Rossi
> Identicum S.A.
> Jorge Newbery 3226
> Tel: +54 (11) 4552-3050
> www.identicum.com
>
>
> On Tue, May 29, 2018 at 11:18 AM Alexandre Zia <alexandre.zia at ifood.com.br>
> wrote:
>
>> Hi,
>>
>> I've found what has happened.
>>
>> We ran out of licenses in Google Apps, and for all accounts Midpoint
>> tried to create in google while out of licenses midpoint has created a
>> faulty shadow Google Apps account.
>> Then when I was trying to reconciliate these accounts for some reason it
>> was not passing the email correctly in the create user API
>>
>> So I had to find all of these faulty google apps shadow and delete
>> manually, then reconciliate and Midpoint was able to create the account in
>> google and related good shadow account
>>
>> Now we have to monitor closely our available licenses in google and never
>> run out of licenses again, to avoid such situation in Midpoint.
>>
>> Regards
>> Alexandre
>>
>>
>>
>>
>> On Tue, May 29, 2018 at 9:47 AM, Nicolas Rossi <nrossi at identicum.com>
>> wrote:
>>
>>> Hi Alexandre, we are also working with this connector but we still have
>>> some issues (with groups associations). We didn't experience this kind of
>>> error but it seems that the connector is not sending the email. Can you
>>> check if the user being synchronized has a valid email ?
>>>
>>> Kind regards,
>>>
>>>
>>> Ing Nicolás Rossi
>>> Identicum S.A.
>>> Jorge Newbery 3226
>>> Tel: +54 (11) 4552-3050
>>> www.identicum.com
>>>
>>>
>>> On Mon, May 28, 2018 at 10:05 PM Alexandre Zia <
>>> alexandre.zia at ifood.com.br> wrote:
>>>
>>>> Hello
>>>>
>>>>  Is Google Apps connector stable and reliable?
>>>> https://wiki.evolveum.com/display/midPoint/Google+Apps+Connector
>>>>
>>>>  Is there any other Google apps connector that works better?
>>>>
>>>> I'm trying to use it, but cant make it work propperly.
>>>> It fails to create accounts, then sometimes it create but I can't see a
>>>> reason for this behaviour
>>>>
>>>> Always this error:
>>>>
>>>> 2018-05-29 00:52:33,667 [] [http-nio-127.0.0.1-8080-exec-9] ERROR
>>>> (com.evolveum.midpoint.provisioning.ucf.impl.connid.ConnIdUtil):
>>>> ConnId Exception org.identityconnectors.framework.common.exceptions.RetryableException
>>>> in connector:10a4f0a9-b0b1-47fd-b84e-1922c0ee89ed(ConnId
>>>> com.evolveum.polygon.connector.googleapps.GoogleAppsConnector
>>>> v1.4.2.18-SNAPSHOT): ConnectorSpec(resource:88fcd699-6a81-46d8-8b71-37bcee02d492(Google
>>>> Apps), name=null, oid=10a4f0a9-b0b1-47fd-b84e-1922c0ee89ed): 400 Bad
>>>> Request
>>>> {
>>>>   "code" : 400,
>>>>   "errors" : [ {
>>>>     "domain" : "global",
>>>>     "location" : "[resource.email.field[0].Value]",
>>>>     "locationType" : "parameter",
>>>>     "message" : "Required parameter: [resource.email.field[0].Value]",
>>>>     "reason" : "required"
>>>>   } ],
>>>>   "message" : "Required parameter: [resource.email.field[0].Value]"
>>>> }
>>>> org.identityconnectors.framework.common.exceptions.RetryableException:
>>>> 400 Bad Request
>>>> {
>>>>   "code" : 400,
>>>>   "errors" : [ {
>>>>     "domain" : "global",
>>>>     "location" : "[resource.email.field[0].Value]",
>>>>     "locationType" : "parameter",
>>>>     "message" : "Required parameter: [resource.email.field[0].Value]",
>>>>     "reason" : "required"
>>>>   } ],
>>>>   "message" : "Required parameter: [resource.email.field[0].Value]"
>>>> }
>>>>     at org.identityconnectors.framework.common.exceptions.
>>>> RetryableException.wrap(RetryableException.java:101)
>>>> .
>>>> .
>>>> .
>>>> .
>>>>
>>>> Caused by: com.google.api.client.googleapis.json.GoogleJsonResponseException:
>>>> 400 Bad Request
>>>> {
>>>>   "code" : 400,
>>>>   "errors" : [ {
>>>>     "domain" : "global",
>>>>     "location" : "[resource.email.field[0].Value]",
>>>>     "locationType" : "parameter",
>>>>     "message" : "Required parameter: [resource.email.field[0].Value]",
>>>>     "reason" : "required"
>>>>   } ],
>>>>   "message" : "Required parameter: [resource.email.field[0].Value]"
>>>> }
>>>>     at com.google.api.client.googleapis.json.
>>>> GoogleJsonResponseException.from(GoogleJsonResponseException.java:146)
>>>>
>>>>
>>>> I have recreated the resource several times form the sample XML but
>>>> same problem.
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> Alexandre Roberto Zia
>>>>
>>>> *Security*
>>>>
>>>> *TEL:* +55 (11) 3634-3360
>>>>
>>>> www.ifood.com.br
>>>>
>>>>
>>>>
>>>>
>>>> <https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8>
>>>> <https://play.google.com/store/apps/details?id=br.com.brainweb.ifood>
>>>> <https://www.facebook.com/iFood?fref=ts> <https://twitter.com/iFood>
>>>> _______________________________________________
>>>> midPoint mailing list
>>>> midPoint at lists.evolveum.com
>>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>>
>>>
>>> _______________________________________________
>>> midPoint mailing list
>>> midPoint at lists.evolveum.com
>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>
>>
>> --
>>
>> Alexandre Roberto Zia
>>
>> *Security*
>>
>> *TEL:* +55 (11) 3634-3360
>>
>> www.ifood.com.br
>>
>>
>>
>>
>> <https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8>
>> <https://play.google.com/store/apps/details?id=br.com.brainweb.ifood>
>> <https://www.facebook.com/iFood?fref=ts> <https://twitter.com/iFood>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>

-- 

Alexandre Roberto Zia

*Security*

*TEL:* +55 (11) 3634-3360

www.ifood.com.br

<https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8>
<https://play.google.com/store/apps/details?id=br.com.brainweb.ifood>
<https://www.facebook.com/iFood?fref=ts> <https://twitter.com/iFood>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180529/553b05f9/attachment.htm>