search cancel

SCIM connector: unable to modify group membership


Article ID: 213991


Updated On:


CA Identity Manager


the customer has implemented a SCIM connector with the API GW plugin, to provision the GCP (Google Cloud Platform) endpoint type:
The new endpoint type was called GCPL7.
When a group is modified and an account is added as its member (attribute members in the Group class of the connector), the JCS returns a NullPointerException:

2021-04-16 17:14:16,953 101392 [ApacheDS Worker-thread-19] GCPL7_GCP_DEV ( DEBUG  - LOOKUP:No attributes suitable for associative processor(s) found
2021-04-16 17:14:16,953 101392 [ApacheDS Worker-thread-19] GCPL7_GCP_DEV ( ERROR  - internal error in MODIFY(): java.lang.NullPointerException

The same operation, when performed starting from the account (groupMembership attribute in the User Account class of the connector) is performed successfully.

We are using IMPM Provisioning Manager for manipulating the group membership


Release : 14.x

Component : IdentityMinder(Identity Manager)


Group management is not supported (either from UI or IMPM) - the official documentation is also backing it up by leaning towards managing identities (accounts) and instructing to use IM UI for such operations.

This is, therefore, as per design.