darrenjrobinson
commented
1 year ago This maybe associated with SailPoint AuthN API changes. Create a Personal Access Token in the Admin Portal for your account and set that in your module creds config. The module will use that as priority.
DR
On Fri, 16 Jun 2023 at 01:59, jmilczek @.***> wrote:
Even though I have set AdminCredential, v2APIKEY and v3APIKEY credentials using the Set-IdentityNowCredential cmdlet, I receive an error when attempting to run any of the Sailpoint module's cmdlets that require authentication. This is not an issue if I run the same commands using the same credentials on PowerShell 5.1 Desktop, PowerShell 6 Core or PowerShell 7 Core on a Windows system.
Get-Host
Name : Visual Studio Code Host Version : 2023.6.0 InstanceId : 697f6a26-215d-4bee-86bf-fc40899a3c10 UI : System.Management.Automation.Internal.Host.InternalHostUserInterface CurrentCulture : en-US CurrentUICulture : en-US PrivateData : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy DebuggerEnabled : True IsRunspacePushed : False Runspace : System.Management.Automation.Runspaces.LocalRunspace $PSVersionTable
Name Value---- ----- PSVersion 7.3.4 PSEdition Core GitCommitId 7.3.4 OS Linux 5.19.0-43-generic #44~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Mon May 22 13:39:36 UTC 2 Platform Unix PSCompatibleVersions {1.0, 2.0, 3.0, 4.0…} PSRemotingProtocolVersion 2.3 SerializationVersion 1.1.0.1 WSManStackVersion 3.0 Get-Module SailPointIdentityNow
ModuleType Version PreRelease Name ExportedCommands---------- ------- ---------- ---- ---------------- Script 1.1.6 SailPointIdentityNow {Complete-IdentityNowTask, Convert-UnixTime, Export-IdentityNowConfig, Get-HashString…} $adminCreds.GetType()
IsPublic IsSerial Name BaseType-------- -------- ---- -------- True True PSCredential System.Object $v2Creds.GetType()
IsPublic IsSerial Name BaseType-------- -------- ---- -------- True True PSCredential System.Object $v3Creds.GetType()
IsPublic IsSerial Name BaseType-------- -------- ---- -------- True True PSCredential System.Object
region Populate Sailpoint ConfigurationSet-IdentityNowOrg -orgName $idnorgname
IdentityNow Admin User$adminCreds = [pscredential]::new((Get-AzKeyVaultSecret -VaultName $azkvname -Name $kvidnadminusername -AsPlainText), (Get-AzKeyVaultSecret -VaultName $azkvname -Name $kvidnadminpassword).SecretValue)
IdentityNow v2 API Creds$v2Creds = [pscredential]::new((Get-AzKeyVaultSecret -VaultName $azkvname -Name $kvidnv2username -AsPlainText), (Get-AzKeyVaultSecret -VaultName $azkvname -Name $kvidnv2password).SecretValue)
IdentityNow v3 API Creds$v3Creds = [pscredential]::new((Get-AzKeyVaultSecret -VaultName $azkvname -Name $kvidnv3username -AsPlainText), (Get-AzKeyVaultSecret -VaultName $azkvname -Name $kvidnv3password).SecretValue)
Set-IdentityNowCredential -AdminCredential $adminCreds -v2APIKey $v2Creds -v3APIKey $v3Creds -Verbose Get-SCWXIdentityNowAccessProfile -Verbose Unable to auth password grant type for secureworks v2:True v3:True cred:True pat:False {"error":"unauthorized","error_description":"Full authentication is required to access this resource"}
— Reply to this email directly, view it on GitHub https://github.com/darrenjrobinson/powershell_module_identitynow/issues/64, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAC55XNTP7ESNFBCVRXMKALXLMWMTANCNFSM6AAAAAAZICCHA4 . You are receiving this because you are subscribed to this thread.Message ID: @.***>
jmilczek
Even though I have set AdminCredential, v2APIKEY and v3APIKEY credentials using the Set-IdentityNowCredential cmdlet, I receive an error when attempting to run any of the SailpointIdentityNow module's cmdlets that require authentication. This is not an issue if I run the same commands using the same credentials on PowerShell 5.1 Desktop, PowerShell 6 Core or PowerShell 7 Core on a Windows system.