Management API Identity Collector Settings

Simon_Macpherso — Mon, 31 Jul 2023 23:56:55 GMT

Hello,

When configuring identity collector settings via the management API using mgmt_api, the following command is returning an error.

Using Management APIv1.9

The following example command

mgmt_cli -r true add simple-gateway name 'demo-gw' identity-awareness true identity-awareness-settings.identity-collector true identity-awareness-settings.identity-collector-settings.authentication-settings.users-directories.external-user-profile true identity-awareness-settings.identity-collector-settings.authentication-settings.users-directories.internal-users true identity-awareness-settings.identity-collector-settings.authentication-settings.users-directories.users-from-external-directories specific identity-awareness-settings.identity-collector-settings.authentication-settings.users-directories.specific 'azure_ad_test' identity-awareness-settings.identity-collector-settings.authorized-clients.add.client 'id_collector' identity-awareness-settings.identity-collector-settings.authorized-clients.add.client-secret '123456789101112' identity-awareness-settings.identity-collector-settings.client-access-permissions.accessibility.allow-access-from internal_interfaces

code: "generic_err_invalid_parameter"
message: "Invalid parameter for [authorized-clients]. Invalid value"

Can you identity a problem with this command?

The error indicates a syntax problem with the authorized-clients parameter, however the parameter chain matches what it specified in the API documentation i.e. identity-awareness-settings.identity-collector-settings.authorized-clients.add.client, identity-awareness-settings.identity-collector-settings.authorized-clients.add.client-secret.

I noticed in the documentation there are also the following parameters; identity-awareness-settings.identity-collector-settings.authorized-clients.client, identity-awareness-settings.identity-collector-settings.authorized-clients.client-secret. What are these commands used for?

When I try to use these instead of the add.client and add.client-secret parameter, the following error is returned relating to missing IP address. However, the expected value for the client parameter is a string - Host / Network Group Name or UID.

code: "generic_err_missing_required_parameters"
message: "Missing parameter: [ip-address/ipv4-address/ipv6-address]"

Regards,

Simon

topic Management API Identity Collector Settings in API / CLI Discussion

Management API Identity Collector Settings