Dmitry Zaporozhec

[Dmitry Zaporozhec]

You shouldn’t right generate script twice.
You may try initialize system ones again. You need to delete file
/usr/local/openiam/initialized

and run openiam-cli init ones again.

[Dmitry Zaporozhec]

Vault has not started.
Seems you haven’t disable IPv6. It might be a problem. Also please double check that you are using el7 OpenIAM distribution for CentOS7.

Thanks!

[Dmitry Zaporozhec]

You should define Default scopes on the Authentication provider page.
The ‘Default scopes’ resources with the type ‘OAuth Scope’ will be shown on usefinfo automatically.
Please don’t forget to wait for 5 minutes to re-cache your changes and retrieve a new token to see the changes.
The old token is authorized only for the old set of scopes and you will not see the new files in the userinfo response.

[Dmitry Zaporozhec]

In case of using sync, be sure that value on Synchrtonization config is filled for field:
SQL Query / Directory Filter
somethink like following:
Get-MsolUser -All -UserPrincipalName “test@openiam.com”

[Author]

Posts