<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi! Thanks for your response<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I was finally able to built it. I tried with “mvn package” and it returned some error I could not understand, so I executed it again with the -e flag to see the trace of the errors and it just worked, I don’t know why hahahha<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">However, I restarted midpoint and created the resource manually. I created the Service Principal as explained here
<a href="https://wiki.evolveum.com/pages/viewpage.action?pageId=15433819">https://wiki.evolveum.com/pages/viewpage.action?pageId=15433819</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">After that, the connector seems to be fine because it passes the Test Resource, and also, I am able to see the list of users in accounts -> resource, BUT when I try to access to one of those accounts I get the following error:<o:p></o:p></p>
<p class="MsoNormal"><b>PermissionDeniedException(HTTP error 403 Forbidden : {?? "error": {?? "code": "AccessDenied",?? "message": "Either scp or roles claim need to be present in the token.",??<o:p></o:p></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Obviously looks like a permission error, I am afraid the above guide I followed does not apply to this connector but to the o365connector. Also the connector parameters in that guide does not match at all with the ones that I see in the
Graph API connector<o:p></o:p></p>
<p class="MsoNormal"><img border="0" width="674" height="479" style="width:7.0208in;height:4.9895in" id="Picture_x0020_3" src="cid:image002.png@01D6CFC0.CCC82EB0">
<b><span style="font-size:20.0pt">VS</span></b><span style="font-size:20.0pt"> </span><img border="0" width="860" height="398" style="width:8.9583in;height:4.1458in" id="Picture_x0020_4" src="cid:image003.png@01D6CFC0.CCC82EB0"><o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Javier Laza<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#262626">Cloud Security Operations
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#404040">Plaza de Manuel Llano, Santander, Spain, 39011<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#404040"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial",sans-serif"><img border="0" width="144" height="31" style="width:1.5in;height:.3229in" id="Picture_x0020_1" src="cid:image001.jpg@01D6CFC0.9615A640"></span><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="http://bit.ly/IngramTwitter">Twitter</a> | <a href="http://bit.ly/IngramLinkedIN">LinkedIn</a> |</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#18376A"> <a href="http://bit.ly/IngramFacebook">Facebook</a> </span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">|</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#18376A"> <a href="http://bit.ly/IngramYouTube">YouTube</a> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#404040">This email may contain material that is confidential, and proprietary to Ingram Micro and subsidiaries, for the sole use of the intended recipient. Any review,
reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b>From:</b> midPoint <midpoint-bounces@lists.evolveum.com> <b>
On Behalf Of </b>Richard Richter via midPoint<br>
<b>Sent:</b> viernes, 11 de diciembre de 2020 10:32<br>
<b>To:</b> midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Cc:</b> Richard Richter <virgo@evolveum.com><br>
<b>Subject:</b> Re: [midPoint] Microsoft graph api connector<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">Hello<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">What problem did you encounter during the build? I just cloned the repo, set JAVA_HOME to JDK 11 and ran:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><strong><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">mvn clean package</span></strong><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">It all built nicely. What is your error message?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">Regards<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">Richard Richter<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">midPoint developer<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">
<hr size="2" width="100%" align="center" id="zwchr">
</span></div>
<div>
<p class="MsoNormal"><b><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">From:
</span></b><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br>
<b>To: </b>"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br>
<b>Cc: </b>"Laza, Javier" <<a href="mailto:Javier.Laza@ingrammicro.com">Javier.Laza@ingrammicro.com</a>><br>
<b>Sent: </b>Friday, December 11, 2020 10:10:15 AM<br>
<b>Subject: </b>Re: [midPoint] Microsoft graph api connector<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Hey guys, could you share the jar file?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">I could not built it myself<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Regards,<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From:</span></b><span style="color:black"> midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com">midpoint-bounces@lists.evolveum.com</a>>
<b>On Behalf Of </b>Paulo Fernandes de Souza Junior via midPoint<br>
<b>Sent:</b> lunes, 9 de noviembre de 2020 16:11<br>
<b>To:</b> midPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br>
<b>Cc:</b> Paulo Fernandes de Souza Junior <<a href="mailto:PFSJ@senado.leg.br">PFSJ@senado.leg.br</a>><br>
<b>Subject:</b> Re: [midPoint] Microsoft graph api connector<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black">Thank you, Ethan. I just built it too.<o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"> <o:p></o:p></span></p>
<div id="Signature">
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;font-family:"Times New Roman",serif;color:#1F497D">Paulo Fernandes de Souza Júnior</span></b><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:black">
<br>
</span><b><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#1F497D">NQPPPS<br>
</span></b><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#17365D">Senado Federal -
</span><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#1F497D">PRODASEN<br>
</span><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#17365D">Fone: 61 3303.3924</span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black">
</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;color:#212121">
<hr size="2" width="98%" align="center">
</span></div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span style="color:black">De:</span></b><span style="color:black"> midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com" target="_blank">midpoint-bounces@lists.evolveum.com</a>> em nome de Ethan Kromhout via midPoint <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Enviado:</b> segunda-feira, 9 de novembro de 2020 11:11<br>
<b>Para:</b> <a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a><br>
<b>Cc:</b> Ethan Kromhout<br>
<b>Assunto:</b> Re: [midPoint] Microsoft graph api connector</span><span style="font-size:12.0pt;color:#212121">
</span><span style="color:black"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#212121"> </span><span style="color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121">Here is the source link, I don't know that I've seen a binary distribution, but it builds okay for me.</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121"> </span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121">Thanks,</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121"> </span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121">Ethan</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121"> </span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_Evolveum_connector-2Dmicrosoft-2Dgraph-2Dapi&d=DwMFAw&c=--1RjWWBW4Kf6aBAaj53vPItwfT0BR1YjSDV46P5EvE&r=0OeKN_TS34QS-SJXC_YJThvidGwk12Q2O3mVC4v6a-g&m=hz2iVikVRtAwPtIhxPeO-LIHYjfqoVEkhHqfqWnVgXg&s=8R0Z9BsSF8VCFA3Mk3KqqjIrl6Pgm-jh3qMagZZwqUg&e=" target="_blank">https://github.com/Evolveum/connector-microsoft-graph-api</a></span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121"> </span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#212121"> </span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#212121">On 11/9/20 8:43 AM, Paulo Fernandes de Souza Junior via midPoint wrote:</span><span style="color:black"><o:p></o:p></span></p>
</div>
</div>
</div>
<p><span style="font-size:7.5pt;color:black"><br>
La información contenida en este mensaje es confidencial. En caso de que reciba este mensaje por error le rogamos lo comunique a la mayor brevedad al emisor y proceda a su eliminación definitiva, absteniéndose de copiar, almacenar o difundir su contenido. De
acuerdo con lo establecido en la Ley Orgánica 15/1999, de Protección de Datos de Carácter Personal y en el Reglamento de Desarrollo 1720/2007, los datos personales que facilite a través de la dirección de correo indicada serán incorporados a un fichero titularidad
de INGRAM MICRO, S.L.U., con domicilio en C/ Antonio Machado, 78-80 1ª y 2ª pl. Business Park ( 08840-Viladecans). Mediante el envío de sus datos, Ud. otorga su consentimiento expreso a INGRAM MICRO, S.L.U, para el tratamiento de sus datos, con la finalidad
de atender a su consulta y/o mantener la relación profesional, comercial, y/o contractual que en su caso establezca con INGRAM MICRO, S.L.U. Puede ejercitar sus derechos de acceso, rectificación, cancelación y oposición notificándolo por escrito a la dirección
del remitente, o a la siguiente dirección de correo <a href="mailto:nuevascuentas@ingrammicro.es">
nuevascuentas@ingrammicro.es</a>. De acuerdo con la Ley 34/2002, de Servicios de la Sociedad de la Información y de Comercio Electrónico, Vd. podrá oponerse en cualquier momento al tratamiento de sus datos con fines promocionales notificándonoslo por escrito
a la dirección de correo mencionada.<br>
.................................................................................................................................................................................................................................................<br>
The information contained in this message is confidential. If you receive this message by error please notify it as soon as possible to the sender and proceed to their final elimination by not copy, store or distribute its content. In accordance of what is
stated in the Law 15/1999, of Data Personal Protection and Regulation Rule 1720/2007, the personal data provided through the email address you entered will be included in a file owned by INGRAM MICRO, SLU, located at C/ Antonio Machado, 78-80 1ª y 2ª pl. Business
Park ( 08840-Viladecans). By submitting your data, you expressly give your consent to INGRAM MICRO, SLU, to the treatment of your data, in order to answer to your questions and / or keep the professional, commercial relationship and / or contractual set with
INGRAM MICRO, SLU You can exercise your rights of access, rectification, cancellation and opposition by giving written notification to the sender address or to the following email:
<a href="mailto:nuevascuentas@ingrammicro.es">nuevascuentas@ingrammicro.es</a>. According to Law 34/2002, of the Information Society and Electronic Commerce, you may object at any time to your data treatment for promotional purposes by notifying us in writing
to the email address above.<br>
</span><span style="font-size:7.5pt;color:white">[Ingram_2818e5de]</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a><o:p></o:p></span></p>
</div>
</div>
</div>
</body>
</html>