Configure Azure Active Directory as source for SAP Cloud Identity Provisioning Server

[chrislechn]

Hello all,

I followed the documentation https://help.sap.com/viewer/f48e822d6d484fa5ade7dda78b64d9f5/Cloud/en-US/3d287fa432904f71a8f83d2d880...

As soon as I start a Job to read my users and groups from my Azure AD I get the following error message

org.quartz.JobExecutionException: Cannot execute provisioning job in tenant context: ef6520f1-2d5e-400a-96d9-04cf9d501cdb Caused by: com.sap.id.connector.exception.ProvisioningRuntimeException: Error during execution on behalf of tenant with ID: ef6520f1-2d5e-400a-96d9-04cf9d501cdb Caused by: com.sap.security.iag.provisioning.ProvisioningException: No target systems found for job 59983e91548255554760

I'm not sure if I need to add the Password parameter as Standard or Credential.

Any idea what I'm doing wrong or where I can find a detailed log?

Thank you for your support.

Best regards

Chris

[vobu]

getting the same error here - environment:

- regular MS Azure AD tenant

- application registered in tenant w/ necessary Graph API permissions

- validated working credentials of application (by using postman for a manual OAuth flow/try)

@chris: have you ever figured out sth in this regard?

[vobu]

hi tam, sorry, haven't continued working with IPS - and at the time I did, haven't seen such an error.

"guesstimation" is that one of your destinations is set up with OAuth as authorziation, but onyl supports basic auth

hope you get this solved, v.

[vobu]

all right, got it figured out myself: the IPS needs both a source and a target system to actually trigger a "Read Job" from the source system.

Once I had a target defined, all went well.

Either I missed that in the documentation or it is simply not there. Well.

[former_member668145]

Hi Volker,

according your recommendation I received the following error message:

"org.quartz.JobExecutionException: Cannot execute provisioning job in tenant context: 4308fab4-0e60-4f44-8d88-82322e39dec3 Caused by: com.sap.cloud.ips.connector.exception.ProvisioningRuntimeException: Error during execution on behalf of tenant with ID: 4308fab4-0e60-4f44-8d88-82322e39dec3 Caused by: java.lang.UnsupportedOperationException: Oauth destination null should use basic authentication"

Do you had any experience with this error message?

BR,

Tam

[Sriram2009]

Hi

Check this SAP note 2723050.

Regards

SS

[vobu]

not related to the issue - there seems to be a general problem with IPS trying to connect to MS Azure AD systems