Symptom
A job fails with similar error:
- "errorMessage": "\nuser:Pxxxxxx,\n\nsystem=Identity Authentication - <IAS_TenantID> - target,\n\nerror=org.apache.camel.http.common.HttpOperationFailedException: HTTP operation failed invoking https://<IAS_TenantID>.accounts.ondemand.com/scim/Users/Pxxxxxx with statusCode: 400, Response: {\n \"status\" : \"400\",\n \"schemas\" : [ \"urn:ietf:params:scim:api:messages:2.0:Error\" ],\n \"detail\" : \"Invalid user attribute: sourceSystemId\"\n},\n\ncontent=.......
- "errorMessage": "\nuser:xxxx\n\nsystem=Identity Authentication - <IAS_TenantID> - target,\n\nerror=org.apache.camel.http.common.HttpOperationFailedException: HTTP operation failed invoking https://<IAS TenantID>.ondemand.com/scim/Users with statusCode: 400, Response: {\n \"status\" : \"400\",\n \"schemas\" : [ \"urn:ietf:params:scim:api:messages:2.0:Error\" ],\n \"detail\" : \"Invalid user attribute: sourceSystem\"\n}....
- error=HTTP operation failed invoking https://<IAS_TenantID>.accounts.ondemand.com/scim/Users with statusCode: 400, Response: {"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"status":"400","detail":"Invalid user attribute: sendMail"},
Environment
Identity Provisioning
Reproducing the Issue
- In the IAS properties, ias.api.version has been changed from 1 to 2 (maybe to fix another issue, e.g: 3104314 - Timeout in IPS job when provisioning Azure groups with large membership.)
- Run IPS job with an IAS as target system.
Cause
IAS has different json configurations for IPS depending on the API (Connector) version being used. Older API v1 json is being used and is not compatible with API v2.
Resolution
Follow the steps from Update Connector Version to correctly change the API version and have the correct json transformations for that API version.
See Also
Keywords
timeout, SCIM API version, ias.api.version , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem
Product
SAP SuccessFactors HXM Core 2111