Symptom
A job fails with similar error:
"errorMessage": "\nuser:Pxxxxxx,\n\nsystem=Identity Authentication - <IAS_TenantID> - target,\n\nerror=org.apache.camel.http.common.HttpOperationFailedException: HTTP operation failed invoking https://<IAS_TenantID>.accounts.ondemand.com/scim/Users/Pxxxxxx with statusCode: 400, Response: {\n \"status\" : \"400\",\n \"schemas\" : [ \"urn:ietf:params:scim:api:messages:2.0:Error\" ],\n \"detail\" : \"Invalid user attribute: sourceSystemId\"\n},\n\ncontent=.......
or
"errorMessage": "\nuser:xxxx\n\nsystem=Identity Authentication - <IAS_TenantID> - target,\n\nerror=org.apache.camel.http.common.HttpOperationFailedException: HTTP operation failed invoking https://<IAS TenantID>.ondemand.com/scim/Users with statusCode: 400, Response: {\n \"status\" : \"400\",\n \"schemas\" : [ \"urn:ietf:params:scim:api:messages:2.0:Error\" ],\n \"detail\" : \"Invalid user attribute: sourceSystem\"\n}....
Environment
Identity Provisioning
Reproducing the Issue
Run IPS job with IAS as target
In the IAS properties, ias.api.version has been changed from 1 to 2 possibly to fix another issue, e.g: 3104314 - Timeout in IPS job when provisioning Azure groups with large membership.
Cause
IAS has different json configurations for IPS depending on the API (Connector) version being used. Older API v1 json is being used and is not compatible with API v2.
Resolution
Follow the steps from Update Connector Version
to correctly change the API version and have the correct json transformations for that API version.
See Also
3076742 - A new version of the Identity Authentication connector is causing errors in Identity Provisioning
Keywords
timeout, SCIM API version , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem