Azure AD to Oracle IDCS user deletion not flowing

Question

Azure AD to Oracle IDCS user deletion not flowing

Vinay Kumar Gupta 96

Hi,

I have configured the federation and auto user provisioning between Azure AD and Oracle IDCS.

User creation, modification data is flowing from Azure AD to Oracle IDCS but deletion is not flowing.

It is failing with below reason:

["urn:ietf:params:scim:api:messages:2.0:Error","urn:ietf:params:scim:api:oracle:idcs:extension:messages:Error"],"detail":"An invalid data type was provided for the attribute : active. The expected data type is 'boolean'. The provided data type is [ string,dateTime,binary,reference ].","status":"400","urn:ietf:params:scim:api:oracle:idcs:extension:messages:Error":{"messageId":"error.common.validation.invalidAttributeType"}}. This operation was retried 0 times. It will be retried again after this date: 2020-05-09T11:37:06.2324767Z UTC

I checked the attribute mapping, for attribute 'active', datatype is already boolean.

Please suggest if it is working for someone.

Thanks.

Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-05-12T23:14:20.997+00:00

Can you please provide the screenshot of "Active" attribute under Mappings sections of your application ?
Vinay Kumar Gupta 96 Reputation points

2020-05-13T00:29:02.573+00:00
Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-05-20T22:44:51.203+00:00

so, it is not computed but a direct assignment. Are you using Oracle IDCS for E-business Suite ? I am checking on this internally and will let you know if anything is required from you.
Vinay Kumar Gupta 96 Reputation points

2020-05-21T01:07:23.4+00:00

Hi Saurabh,

I have created Oracle IDCS as non-gallary application.

Thanks & Regards,
Vinay
Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-05-28T23:21:49.557+00:00

@Vinay Kumar Gupta I have got information from product team that the recommended way of configuring Oracle IDCS is using a gallery app.
Please refer to the documentation for the same. Any specific reason you are going with non-gallery configuration.

1 answer

Your answer

Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-05-12T23:14:20.997+00:00

Can you please provide the screenshot of "Active" attribute under Mappings sections of your application ?
Vinay Kumar Gupta 96 Reputation points

2020-05-13T00:29:02.573+00:00
Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-05-20T22:44:51.203+00:00

so, it is not computed but a direct assignment. Are you using Oracle IDCS for E-business Suite ? I am checking on this internally and will let you know if anything is required from you.
Vinay Kumar Gupta 96 Reputation points

2020-05-21T01:07:23.4+00:00

Hi Saurabh,

I have created Oracle IDCS as non-gallary application.

Thanks & Regards,
Vinay
Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-05-28T23:21:49.557+00:00

@Vinay Kumar Gupta I have got information from product team that the recommended way of configuring Oracle IDCS is using a gallery app.
Please refer to the documentation for the same. Any specific reason you are going with non-gallery configuration.

Answer 1

Rahul 251

Hi All,

There was an issue with Microsoft SCIM I raised a premium case with MS and they fixed the issue from backend. For me also Hard Delete was not working.

After raising incident with MS support hard delete started working back. Last week only it got fixed you may try now.

Regards,
Rahul

Vinay Kumar Gupta 96 Reputation points

2020-05-23T14:33:59.443+00:00

Hi Rahul,

I deleted a new user in Azure AD but it didn't get processed to IDCS.
It is failing with same reason:
["urn:ietf:params:scim:api:messages:2.0:Error","urn:ietf:params:scim:api:oracle:idcs:extension:messages:Error"],"detail":"An invalid data type was provided for the attribute : active. The expected data type is 'boolean'. The provided data type is [ string,dateTime,binary,reference ].","status":"400","urn:ietf:params:scim:api:oracle:idcs:extension:messages:Error":{"messageId":"error.common.validation.invalidAttributeType"}}. This operation was retried 0 times. It will be retried again after this date: 2020-05-23T14:23:25.6454389Z UTC

Please let me know if I have to make any change in my setup.

Best Regards,
Vinay
Rahul 251 Reputation points

2020-05-25T15:09:01.523+00:00

Hi Vinay,

I had different issue where Hard Delete itself was not working from MS side.

May I know which Delete you performed for the end user Soft Delete or Hard Delete ?

Soft Delete are always treated as DISABLED state. Reference Link: https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works#de-provisioning

Hard Delete are treated as DELETE.

Just notice the behavior. One more thing Hard Delete never sends any boolean value. Boolean value are always send in Soft Delete operation. Check the Application Audit Logs for both cases Hard Delete / Soft Delete and Activity Type = Export in that you will have a TAB Modified Property see the values updated.
Vinay Kumar Gupta 96 Reputation points

2020-05-26T03:06:47.407+00:00

Hi Rahul,

I am doing Hard Delete but it is considering it as soft delete event.
I have attached the screenshot too. Please check and suggest.

Thanks.
Rahul 251 Reputation points

2020-05-26T11:50:11.65+00:00
Hi Vinay,

Can you try this :

Create a new user and assign it to the application. (Validate user got created in OIDC)

Once the user is created in OIDC. Just perform Soft Delete on that same user. (Just delete the user that's it don't permanently delete)

Validate the operation after 1 hour because provisioning cycle runs every 40 mins. OR you can Turn on-off Sync to see the result.

See the export Activity for this event is triggered successfully or not.

Let us know the result.

Share via

Azure AD to Oracle IDCS user deletion not flowing

1 answer

Your answer