Unable to login to SCIM Bridge [GCP]

Hi @tnam10:

Thanks for emailing everything in! We'll be in touch soon, so keep an eye out.

Jack

Hey Jack_P_1P ,

I'm having a similar issue to the post above. The Bridge logs show the error as:
{"level":"error","version":"2.7.0","build":"207001","application":"op-scim","request_id":"ces89eq03vucv0bl270g","error":"Server: (failed to GetCurrentUserWithGroupMemberships), Wrapped: (failed to Account.GetInfo), session is no longer valid, or missing credentials to authenticate","time":"2023-01-06T21:28:51Z","message":"failed to SyncGroups"}

I set up our Bridge SCIM configuration using GCP this morning and was successful (or so I thought). After about 10-20 min it would stop syncing. Following @huyngo advice, I also deleted/recreated the JSON key, which got it working again for another 30 min or so before it stopped syncing with the same error. Could you please assist me with this?

I sent an email to mailto:businesssupport@1password.com and included the Bridge logs, GCP logs as well as a link to this page (+ my username) just now.

Thank you for the help!

Tenzin

Jack_P_1P Thank you! Going to upgrade now. Incidentally, we lost access to the SCIM bridge dashboard again (says the bearer token is no longer valid), so perfect opportunity to upgrade. I'll update if anything looks off afterwards.

Hi @chravtacque:

Version 2.7.0 of 1Password SCIM Bridge contains the fix for the issue my colleague Laz referred to earlier. Let me know if you're still having trouble with the SCIM bridge, and I'll be able to take a closer look.

Jack

Jack_P_1P Any ideas when the new release will be available?

Hi @huyngo:

You're very welcome! We're investigating this behavior, so please do reach out directly if you run into trouble again so we can take a closer look.

Jack

Jack_P_1P Ahh, thanks for the quick response, Jack! We managed to fix it by going into the scim bridge, then deleting the credentials json and reuploading after looking through the logs and seeing this error:

{"level":"error","version":"2.6.2","build":"206022","application":"op-scim","request_id":"cdmnvg4hhkfl5rpsrnkg","error":"Server: (failed to GetCurrentUserWithGroupMemberships), Wrapped: (failed to Account.GetInfo), session is no longer valid, or missing credentials to authenticate","time":"2022-11-18T23:13:59Z","message":"failed to SyncGroups"}


We figured that deleting/readding the JSON would trigger a session refresh and it did. Not sure if sessions should be refreshed automatically or not, but we'll just periodically refresh it manually/whenever the problem shows up again.

Hi @huyngo:

In that case, reaching out to us directly via businesssupport@1password.com would be your best bet. Include logs from your SCIM bridge, and we'll be able to take a closer look.

https://support.1password.com/cs/scim-logs/

Jack

Hi, sorry for the late response! Thanks for following up. We ended up doing the same thing as timchambers, completely redeployed a new cluster and scim bridge.

Right now we're running into a problem where we can still log into the scim bridge and everything looks fine, but user provisioning isn't happening in 1Password. The scim bridge is working, and health monitoring for the Google Workspace integration is good, but the managed groups aren't provisioning new users.

@"laz.h_1P" any advice on this?

Hi @chravtacque,

Thanks for writing in. Sorry to hear that you are also experiencing this issue. For now, the best that I can suggest is the temporary workaround as you found. We have identified the root issue and will be including a permanent fix in the next release. Thank you for your continued patience