Signing back into the Community for the first time? You'll need to reset your password to access your account.  Find out more.

Forum Discussion

Former Member's avatar
Former Member
2 years ago

SCIM bridge provisioning gives 500 Internal Server Error

Hi, I have recently upgraded from 1Password Teams to 1Password Business and today I started setting up the automated provisioning. I would like to have connected to EntraID, and, as we are primarily on the Microsoft 365 platform, I was happy to see that the Azure Kubernetes SCIM bridge option was offered. I followed the instructions and successfully set up the Kubernetes instance. I updated the DNS records, and now I can see the status page at https://scim.{ourdomainname}.com/app/status. (I masked it for privacy, but I don't use the curly brackets, of course - same goes for the rest of the explanation)
The manual described creating an Azure Enterprise application, and this is where I get stuck. Filling out the tenant URL https://scim.{ourdomainname}.com and the bearer token - exactly the same one as I successfully use to access the status page above - gives me an error message:

```
You appear to have entered invalid credentials. Please confirm you are using the correct information for an administrative account.

Error code: SystemForCrossDomainIdentityManagementCredentialValidationUnavailable
Details: We received this unexpected response from your application:

Received response from Web resource.
Resource: https://scim.{ourdomainname}.com/Users?filter=userName+eq+"651022bd-56a1-4345-{some other numerics}"
Operation: GET
Response Status Code: InternalServerError
Response Headers: Content-Security-Policy: default-src 'none'; connect-src 'self' https:; script-src 'self'; img-src 'self' data: https://w3.org; style-src 'self'; frame-ancestors 'none'; form-action 'none'; manifest-src 'self'
Referrer-Policy: no-referrer
Request-Id: cl2d9d9pvf4s73d90gbg
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Robots-Tag: none
X-Xss-Protection: 1; mode=block
Date: Fri, 03 Nov 2023 11:08:38 GMT
Response Content: {"detail":"500 (Internal Server Error)","schemas":["urn:ietf:params:scim:api:messages:2.0:Error"]}

Please check the service and try again.
```

I am not sure how to proceed, as I would deduct this as something that has to do with the image I deployed to Kubernetes. Could it be that there's something wrong with that, or am I missing something?

Thanks in advance.
-- Mark


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

  • RonD1P's avatar
    RonD1P
    Icon for 1Password Team rank1Password Team

    Hey, @markvanderhurk!

    Looking at this more closely, the problem is most likely that your Automated User Provisioning is paused.

    To fix this, can you follow these steps please:

    1. Log into your 1Password account on the web.
    2. Click Integrations.
    3. Click the User Provisioning tile.
    4. Click the slider for Provisioning users & groups.

    Let me know if this helps get things back on track.

  • Former Member's avatar
    Former Member

    Thanks Ron, that solved the issue! I tried to see if that was mentioned in the help docs, as far as I could see it wasn't - maybe explicitly add it?