My Oracle Support Banner

Identity Cloud Service (IDCS) Bridge Filter Group Syncing Incorrect Groups (Doc ID 2496693.1)

Last updated on APRIL 16, 2019

Applies to:

Identity Cloud Service (IDCS) - Version N/A and later
Information in this document applies to any platform.

Symptoms

We want the bridge to only synchronize groups whose name start with PedroGroup.

To do that we use the following group filter: (&(sAMAccountName=PedroGroup*)(objectClass=group)

 

After some time we will notice under a psecial use case that we will start to sync groups that we should not as we can see in  the below logs

 

2019-01-20 08:32:51,165 [76] DEBUG IDBridge - Sending POST request to admin/v1/BulkSourceEvents.
2019-01-20 08:32:51,301 [30] ERROR IDBridge - 400 : error.common.validation.missingReqAttributes : Missing required attribute(s): userName,emails.
2019-01-20 08:32:51,301 [30] ERROR IDBridge - Failed to create/update User 'CN=user1,OU=Users,DC=example,DC=com'.
2019-01-20 08:32:51,301 [30] INFO IDBridge - Using Filter : ((sAMAccountName=PedroGroup*)(objectClass=group)) to fetch Groups
2019-01-20 08:32:51,343 [30] TRACE IDBridge - {"Operations":[{"method":"POST","path":"/SourceEvents","sourceEventId":"0e3bc7b6-112c-4362-b28f-dc6dcfd3e9aa","data":{"identitySource.value":"406a17646597447b80d65aad32283a7b","objectClassName":"Group","uid":"0e3bc7b6-482c-4362-b28f-dc6dcfd3e9aa","parentObjectUid":"0f33edc7-125c-4715-867f-7f6a0f51a254","eventType":"update","attributes":[{"name":"member","operation":"add","values":["8e334e9a-a2e9-4bcd-a890-675da13f3a73"]}]}}],"schemas":["urn:ietf:params:scim:api:messages:2.0:BulkRequest"]}
2019-01-20 08:32:51,343 [30] DEBUG IDBridge - Sending POST request to admin/v1/BulkSourceEvents.
2019-01-20 08:32:51,767 [30] TRACE IDBridge - {"Operations":[{"method":"POST","path":"/SourceEvents","sourceEventId":"0e3bc7b6-112c-4362-b28f-dc6dcfd3e9aa","data":{"identitySource.value":"406a17646597447b80d65aad32283a7b","objectClassName":"Group","uid":"0e3bc7b6-482c-4362-b28f-dc6dcfd3e9aa","parentObjectUid":"0f33edc7-125c-4715-867f-7f6a0f51a254","eventType":"create","attributes":[{"name":"member","operation":"add","values":["8e334e9a-a2e9-4bcd-a890-675da13f3a73"]},{"name":"name","operation":"add","values":["group6"]}]}}],"schemas":["urn:ietf:params:scim:api:messages:2.0:BulkRequest"]}
2019-01-20 08:32:51,767 [30] DEBUG IDBridge - Sending POST request to admin/v1/BulkSourceEvents.
2019-01-20 08:32:52,137 [30] INFO IDBridge - Group 'CN=testgroup,OU=Groups,DC=example,DC=com' has been successfully created on the remote server.
2019-01-20 08:32:52,138 [30] INFO IDBridge - Active Directory synchronization completed successfully.

 

 

 The group testgroup was synchronized incorrectly

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.