IdStory IdM connectors » ms-graph-api-connector

When creating a GUEST user object the connector sends invitation and then performs update operation. This update operation fails with exception:

com.microsoft.graph.http.GraphServiceException: Error code: Request_ResourceNotFound
Error message: Resource 'vladimir_kotynek.cz#EXT#@MYTESTTENANT.onmicrosoft.com' does not exist or one of its queried reference-property objects are not present.

PATCH https://graph.microsoft.com/v1.0/users/vladimir_kotynek.cz%23EXT%23%40MYTESTTENANT.onmicrosoft.com
SdkVersion : graph-java/v2.6.0
Authorization : [PII_REDACTED]
{"accountEnabled":true,"givenName":"BCV","mail":"v[...]

404 : Not Found
[...]

[Some information was truncated for brevity, enable debug logging for more details]
    at com.microsoft.graph.http.GraphServiceException.createFromConnection(GraphServiceException.java:501)
...

The request in IdM shows that state on system is "Error" until provisioning re-try mechanism re-tries the operation. Update is performed correctly, however the first thing the user will see after the request is submited (if the role has no approval workflow) is "Error". This would be acceptable in cases where the role is assigned automatically but not for user requests.

Plus in case the automapping feature in IdM is disabled re-try mechanism performs another CREATE operation and a second (duplicate) invitation e-mail is sent to the user. The connector should at least check if the account already exists before sending the invitation.