AirWatch ADC Collector test connection fails with "This API has reached end-of-life" error in RSA Identity Governance & Lifecycle

[#1]

Article Number

000037706

Applies To

RSA Product Set: Identity Governance & Lifecycle
RSA Platform: VMware Workspace ONE 18.11
RSA Version/Condition: 7.1.0, 7.1.1
 

Issue

When AirWatch is installed on the VMware Workspace ONE 18.11 platform, the AirWatch ADC collector test connection fails with the following error:

This API has reached end-of-life
 

The screen will show:

Collector test failed: com.aveksa.server.runtime.ServerException: Test request failed with response: com.aveksa.server.runtime.ServerException: com.aveksa.common.DataReadException: com.aveksa.common.ConnectException: {"errorCode":1037,"message":"This API has reached end-of-life","activityId":"946a4c8a-42b7-4517-90a0-ddceed7ace6a"} . Caused by com.aveksa.common.ConnectException: {"errorCode":1037,"message":"This API has reached end-of-life","activityId":"946a4c8a-42b7-4517-90a0-ddceed7ace6a"} Caused By Stack com.aveksa.common.DataReadException: com.aveksa.common.ConnectException: {"errorCode":1037,"message":"This API has reached end-of-life","activityId":"946a4c8a-42b7-4517-90a0-ddceed7ace6a"}

at com.aveksa.collector.airwatch.adc.AirWatchGroupDataIterator.getGroupMembers(AirWatchGroupDataIterator.java:187)
at com.aveksa.collector.airwatch.adc.AirWatchGroupDataIterator.getGroupMembers(AirWatchGroupDataIterator.java:102)
at com.aveksa.collector.airwatch.adc.AirWatchGroupDataIterator.next(AirWatchGroupDataIterator.java:76)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:440)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectTestData(AccountDataCollector.java:277)
at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:533)
at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:204)
at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
at java.lang.Thread.run(Thread.java:748) Caused by: com.aveksa.common.ConnectException: {"errorCode":1037,"message":"This API has reached end-of-life","activityId":"946a4c8a-42b7-4517-90a0-ddceed7ace6a"}
at com.aveksa.collector.airwatch.util.AirWatchConnectionObject.restCall(AirWatchConnectionObject.java:217)
at com.aveksa.collector.airwatch.adc.AirWatchGroupDataIterator.getGroupMembers(AirWatchGroupDataIterator.java:181)

... 15 more
End Stack

 

Image description

An AirWatch ADC collector test connection succeeds when connecting to an AirWatch deployment on VMware Workspace ONE 18.10.

Cause

Starting with VMware Workspace ONE 18.11, the URL used for AirWatch user-group membership, /API/V1/system/groups/<groupid>/getusers, is deprecated. The supported URL is API/V1/system/groups/<groupid>/users.
 

Note the change from getusers to users.

Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle patches:

•      RSA Identity Governance & Lifecycle 7.1.0 P07
•      RSA Identity Governance & Lifecycle 7.1.1 P01

The patch adds support for both URL formats.

Workaround