[midPoint] Microsoft graph api connector

Tue Dec 15 11:33:59 CET 2020

Hey Ethan,

Yesterday I came to the same conclusion as you, this is a paging problem. I was about start reading the code to modify it when I saw you reply.

I have to say your code solved the problem for me as well, so thank you so much!

Regarding the groups, agree with you, they are not working. They are not recognized under the Entitlements tab of the resource. The memberOfGroup attribute is there in the accounts attributes, but not the assigned roles, only the groups the user belongs to.

Regards,

From: midPoint <midpoint-bounces at lists.evolveum.com> On Behalf Of Ethan Kromhout via midPoint
Sent: lunes, 14 de diciembre de 2020 18:39
To: midpoint at lists.evolveum.com
Cc: Ethan Kromhout <kromhout at unc.edu>
Subject: Re: [midPoint] Microsoft graph api connector

I did have a similar issue, it appeared to me that the paging that was implemented in the connector wasn't compatible with the current paging behavior of the MS Graph API. I altered the paging to work with our tenant's current version of the MS Graph API, the way I did it loops through all available pages for the query before processing the objects, which may not be ideal in really large tenants, but it got things working for me.

I've forked that at the below URL. If it addresses the issue for you as well, then I'll prepare a pull request to see about adding that in. I also added a configuration item for pagesize.

https://github.com/ekromhout/connector-microsoft-graph-api<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ekromhout_connector-2Dmicrosoft-2Dgraph-2Dapi&d=DwMFaQ&c=--1RjWWBW4Kf6aBAaj53vPItwfT0BR1YjSDV46P5EvE&r=0OeKN_TS34QS-SJXC_YJThvidGwk12Q2O3mVC4v6a-g&m=jMlqyQsCUWrkmb22cZhCMtAMpXCFy0COiiaNnpjT5w8&s=3yUSQKKpFMhrS_JP2YB8iMD8-dkjX4ElLeXr3P8eIl4&e=>

I also found a change that I needed for group processing. I'll write up a separate thread on that to see if anyone else has that issue too, it is different enough from this problem that I don't think it should be in the same pull request.

Thanks,

Ethan
On 12/14/20 5:55 AM, Laza, Javier via midPoint wrote:
Hey I finally made this work, I had to create the App Registration manually and give it read user permissions over the Graph API

But know, I see the connector is only able to pull 100 users, no more. Had you or anyone else faced this issue?

From: midPoint <midpoint-bounces at lists.evolveum.com><mailto:midpoint-bounces at lists.evolveum.com> On Behalf Of Richard Richter via midPoint
Sent: viernes, 11 de diciembre de 2020 10:32
To: midPoint General Discussion <midpoint at lists.evolveum.com><mailto:midpoint at lists.evolveum.com>
Cc: Richard Richter <virgo at evolveum.com><mailto:virgo at evolveum.com>
Subject: Re: [midPoint] Microsoft graph api connector

Hello

What problem did you encounter during the build? I just cloned the repo, set JAVA_HOME to JDK 11 and ran:
mvn clean package

It all built nicely. What is your error message?

Regards

Richard Richter
midPoint developer

________________________________
From: "midPoint General Discussion" <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
To: "midPoint General Discussion" <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
Cc: "Laza, Javier" <Javier.Laza at ingrammicro.com<mailto:Javier.Laza at ingrammicro.com>>
Sent: Friday, December 11, 2020 10:10:15 AM
Subject: Re: [midPoint] Microsoft graph api connector

Hey guys, could you share the jar file?

I could not built it myself

Regards,

From: midPoint <midpoint-bounces at lists.evolveum.com<mailto:midpoint-bounces at lists.evolveum.com>> On Behalf Of Paulo Fernandes de Souza Junior via midPoint
Sent: lunes, 9 de noviembre de 2020 16:11
To: midPoint General Discussion <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
Cc: Paulo Fernandes de Souza Junior <PFSJ at senado.leg.br<mailto:PFSJ at senado.leg.br>>
Subject: Re: [midPoint] Microsoft graph api connector

Thank you, Ethan. I just built it too.

Paulo Fernandes de Souza Júnior
NQPPPS
Senado Federal - PRODASEN
Fone: 61 3303.3924

________________________________
De: midPoint <midpoint-bounces at lists.evolveum.com<mailto:midpoint-bounces at lists.evolveum.com>> em nome de Ethan Kromhout via midPoint <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
Enviado: segunda-feira, 9 de novembro de 2020 11:11
Para: midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>
Cc: Ethan Kromhout
Assunto: Re: [midPoint] Microsoft graph api connector

Here is the source link, I don't know that I've seen a binary distribution, but it builds okay for me.

Thanks,

Ethan

https://github.com/Evolveum/connector-microsoft-graph-api<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_Evolveum_connector-2Dmicrosoft-2Dgraph-2Dapi&d=DwMFAw&c=--1RjWWBW4Kf6aBAaj53vPItwfT0BR1YjSDV46P5EvE&r=0OeKN_TS34QS-SJXC_YJThvidGwk12Q2O3mVC4v6a-g&m=hz2iVikVRtAwPtIhxPeO-LIHYjfqoVEkhHqfqWnVgXg&s=8R0Z9BsSF8VCFA3Mk3KqqjIrl6Pgm-jh3qMagZZwqUg&e=>

On 11/9/20 8:43 AM, Paulo Fernandes de Souza Junior via midPoint wrote:

La información contenida en este mensaje es confidencial. En caso de que reciba este mensaje por error le rogamos lo comunique a la mayor brevedad al emisor y proceda a su eliminación definitiva, absteniéndose de copiar, almacenar o difundir su contenido. De acuerdo con lo establecido en la Ley Orgánica 15/1999, de Protección de Datos de Carácter Personal y en el Reglamento de Desarrollo 1720/2007, los datos personales que facilite a través de la dirección de correo indicada serán incorporados a un fichero titularidad de INGRAM MICRO, S.L.U., con domicilio en C/ Antonio Machado, 78-80 1ª y 2ª pl. Business Park ( 08840-Viladecans). Mediante el envío de sus datos, Ud. otorga su consentimiento expreso a INGRAM MICRO, S.L.U, para el tratamiento de sus datos, con la finalidad de atender a su consulta y/o mantener la relación profesional, comercial, y/o contractual que en su caso establezca con INGRAM MICRO, S.L.U. Puede ejercitar sus derechos de acceso, rectificación, cancelación y oposición notificándolo por escrito a la dirección del remitente, o a la siguiente dirección de correo nuevascuentas at ingrammicro.es<mailto:nuevascuentas at ingrammicro.es>. De acuerdo con la Ley 34/2002, de Servicios de la Sociedad de la Información y de Comercio Electrónico, Vd. podrá oponerse en cualquier momento al tratamiento de sus datos con fines promocionales notificándonoslo por escrito a la dirección de correo mencionada.
.................................................................................................................................................................................................................................................
The information contained in this message is confidential. If you receive this message by error please notify it as soon as possible to the sender and proceed to their final elimination by not copy, store or distribute its content. In accordance of what is stated in the Law 15/1999, of Data Personal Protection and Regulation Rule 1720/2007, the personal data provided through the email address you entered will be included in a file owned by INGRAM MICRO, SLU, located at C/ Antonio Machado, 78-80 1ª y 2ª pl. Business Park ( 08840-Viladecans). By submitting your data, you expressly give your consent to INGRAM MICRO, SLU, to the treatment of your data, in order to answer to your questions and / or keep the professional, commercial relationship  and / or contractual set with INGRAM MICRO, SLU You can exercise your rights of access, rectification, cancellation and opposition by giving written notification to the sender address or to  the following email:  nuevascuentas at ingrammicro.es<mailto:nuevascuentas at ingrammicro.es>. According to Law 34/2002, of the Information Society and Electronic Commerce, you may object at any time to your data treatment for promotional purposes by notifying us in writing to the email address above.
[Ingram_2818e5de]

_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://lists.evolveum.com/mailman/listinfo/midpoint<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.evolveum.com_mailman_listinfo_midpoint&d=DwMFaQ&c=--1RjWWBW4Kf6aBAaj53vPItwfT0BR1YjSDV46P5EvE&r=0OeKN_TS34QS-SJXC_YJThvidGwk12Q2O3mVC4v6a-g&m=jMlqyQsCUWrkmb22cZhCMtAMpXCFy0COiiaNnpjT5w8&s=rLPTk01j3IeP9_zQPLIb_Io8ZNN4JeQwPzNNyFgvKko&e=>

_______________________________________________

midPoint mailing list

midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>

https://lists.evolveum.com/mailman/listinfo/midpoint<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.evolveum.com_mailman_listinfo_midpoint&d=DwMFaQ&c=--1RjWWBW4Kf6aBAaj53vPItwfT0BR1YjSDV46P5EvE&r=0OeKN_TS34QS-SJXC_YJThvidGwk12Q2O3mVC4v6a-g&m=jMlqyQsCUWrkmb22cZhCMtAMpXCFy0COiiaNnpjT5w8&s=rLPTk01j3IeP9_zQPLIb_Io8ZNN4JeQwPzNNyFgvKko&e=>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20201215/2c8c9eda/attachment-0001.htm>