@itentialopensource/adapter-microsoft_graph 1.3.4 → 1.4.0

package/AUTH.md

@@ -1,43 +1,55 @@
-## Authenticating Microsoft_graph Adapter 
+## Authenticating Microsoft Graph Adapter 
 
-This document will go through the steps for authenticating the Microsoft_graph adapter with Basic Authentication. Properly configuring the properties for an adapter in IAP is critical for getting the adapter online. You can read more about adapter authentication <a href="https://www.itential.com/automation-platform/integrations/adapters-resources/authentication/" target="_blank">HERE</a>. 
+This document will go through the steps for authenticating the Microsoft Graph adapter with OAuth Authentication. Properly configuring the properties for an adapter in IAP is critical for getting the adapter online. You can read more about adapter authentication <a href="https://docs.itential.com/opensource/docs/authentication" target="_blank">HERE</a>. 
 
-### Request Token Authentication
-The Microsoft_graph adapter requires Token Authentication. If you change authentication methods, you should change this section accordingly and merge it back into the adapter repository.
+Companies periodically change authentication methods to provide better security. As this happens this section should be updated and contributed/merge back into the adapter repository.
+
+### OAuth Authentication
+The Microsoft Graph adapter requires OAuth Authentication. If you change authentication methods, you should change this section accordingly and merge it back into the adapter repository.
 
 STEPS  
-1. Ensure you have access to a Microsoft_graph server and that it is running
+1. Ensure you have access to a Microsoft Graph server and that it is running
 2. Follow the steps in the README.md to import the adapter into IAP if you have not already done so
-3. Use the properties below for the ```properties.authentication``` field
-4. Note that the token_URI_path has a variable which should be replaced with a valid tenant value
+3. Use the properties below for the ```properties.authentication``` field. Note that the token_URI_path has a variable which should be replaced with a valid tenant value
 ```json
 "authentication": {
-      "auth_method": "request_token",
-      "username": "",
-      "password": "",
-      "token": "token",
-      "token_timeout": 600000,
-      "token_cache": "local",
-      "token_URI_path": "/{tenant}/oauth2/v2.0/token",
-      "invalid_token_error": 401,
-      "auth_field": "header.headers.Authorization",
-      "auth_field_format": "Bearer {token}",
-      "auth_logging": false,
-      "sso": {
-        "protocol": "",
-        "host": "",
-        "port": 0
-      }
+  "auth_method": "request_token",
+  "token_timeout": 600000,
+  "token_cache": "local",
+  "token_URI_path": "/{tenant}/oauth2/v2.0/token",
+  "invalid_token_error": 401,
+  "auth_field": "header.headers.Authorization",
+  "auth_field_format": "Bearer {token}",
+  "client_id": "<client_id>",
+  "client_secret": "<client_secret>",
+  "grant_type": "client_credentials",
+  "auth_logging": false,
+  "sso": {
+    "protocol": "https",
+    "host": "login.microsoftonline.com",
+    "port": 443
+  }
+}
+```
+4. Use the properties below for the ```properties.request.global_request.authData``` field to add scope to the token request
+```json
+"request": {   
+  "global_request": {
+    "authData": {
+      "scope": "https://graph.microsoft.com/.default"
     }
+  }
+}
 ```
-4. Restart the adapter. If your properties were set correctly, the adapter should go online. 
+5. Restart the adapter. If your properties were set correctly, the adapter should go online. 
 
 ### Troubleshooting
-- Make sure you copied over the correct username and password.
+- Make sure you copied over the correct client_id and client_secret.
 - Turn on debug level logs for the adapter in IAP Admin Essentials.
 - Turn on auth_logging for the adapter in IAP Admin Essentials (adapter properties).
 - Investigate the logs - in particular:
   - The FULL REQUEST log to make sure the proper headers are being sent with the request.
   - The FULL BODY log to make sure the payload is accurate.
   - The CALL RETURN log to see what the other system is telling us.
+- Credentials should be ** masked ** by the adapter so make sure you verify the username and password - including that there are erroneous spaces at the front or end.
 - Remember when you are done to turn auth_logging off as you do not want to log credentials.

package/BROKER.md

@@ -22,18 +22,25 @@ Below is an example of how you may set up the properties for this call.
   {
     "path": "/{org}/get/devices",
     "method": "GET",
+    "pagination": {
+      "offsetVar": "",
+      "limitVar": "",
+      "incrementBy": "limit",
+      "requestLocation": "query"
+    },
     "query": {},
     "body": {},
     "headers": {},
     "handleFailure": "ignore",
+    "responseDataKey": "",
     "requestFields": {
       "org": "555"
     },
     "responseFields": {
-      "name": "host",
-      "ostype": "os",
+      "name": "{hostField}",
+      "ostype": "{osField}",
       "ostypePrefix": "system-",
-      "ipaddress": "attributes.ipaddr",
+      "ipaddress": "{attributes.ipaddr}",
       "port": "443"
     }
   },
@@ -44,16 +51,17 @@ Below is an example of how you may set up the properties for this call.
     "body": {},
     "headers": {},
     "handleFailure": "ignore",
+    "responseDataKey": "",
     "requestFields": {
       "org": "777"
     },
     "responseFields": {
-      "name": "host",
-      "ostype": "os",
+      "name": "{hostField}",
+      "ostype": "{osField}",
       "ostypePrefix": "system-",
-      "ipaddress": "attributes.ipaddr",
+      "ipaddress": "{attributes.ipaddr}",
       "port": "443",
-      "myorg": "org"
+      "myorg": "{orgField}"
     }
   }
 ]
@@ -88,12 +96,13 @@ Below is an example of how you may set up the properties for this call.
     "headers": {},
     "handleFailure": "ignore",
     "statusValue": "online",
+    "responseDataKey": "",
     "requestFields": {
-      "org": "myorg",
-      "id": "name"
+      "org": "{myorg}",
+      "id": "{name}"
     },
     "responseFields": {
-      "status": "status"
+      "status": "{status}"
     }
   }
 ]
@@ -129,9 +138,10 @@ Below is an example of how you may set up the properties for this call.
     "body": {},
     "headers": {},
     "handleFailure": "ignore",
+    "responseDataKey": "",
     "requestFields": {
-      "org": "myorg",
-      "id": "name"
+      "org": "{myorg}",
+      "id": "{name}"
     }
     "responseFields": {}
   },
@@ -142,8 +152,9 @@ Below is an example of how you may set up the properties for this call.
     "body": {},
     "headers": {},
     "handleFailure": "ignore",
+    "responseDataKey": "",
     "requestFields": {
-      "org": "myorg"
+      "org": "{myorg}"
     }
     "responseFields": {}
   }
@@ -178,17 +189,18 @@ Below is an example of how you may set up the properties for this call.
     "body": {},
     "headers": {},
     "handleFailure": "ignore",
+    "responseDataKey": "",
     "requestFields": {
-      "org": "myorg",
-      "id": "name"
+      "org": "{myorg}",
+      "id": "{name}"
     },
     "responseFields": {
-      "name": "host",
-      "ostype": "os",
+      "name": "{hostField}",
+      "ostype": "{osField}",
       "ostypePrefix": "system-",
-      "ipaddress": "attributes.ipaddr",
+      "ipaddress": "{attributes.ipaddr}",
       "port": "443",
-      "myorg": "org"
+      "myorg": "{orgField}"
     }
   }
 ]

package/CALLS.md

@@ -19,7 +19,7 @@ These are adapter methods that IAP or you might use. There are some other method
   </tr>
   <tr>
     <td style="padding:15px">healthCheck(callback)</td>
-    <td style="padding:15px">This call ensures that the adapter can communicate with Adapter for ServiceNow. The actual call that is used is defined in the adapter properties and .system entities action.json file.</td>
+    <td style="padding:15px">This call ensures that the adapter can communicate with Adapter for Microsoft Graph. The actual call that is used is defined in the adapter properties and .system entities action.json file.</td>
     <td style="padding:15px">No</td>
   </tr>
   <tr>
@@ -29,7 +29,7 @@ These are adapter methods that IAP or you might use. There are some other method
   </tr>
   <tr>
     <td style="padding:15px">encryptProperty(property, technique, callback)</td>
-    <td style="padding:15px">This call will take the provided property and technique, and return the property encrypted with the technique. This allows the property to be used in the adapterProps section for the credential password so that the password does not have to be in clear text. The adapter will decrypt the property as needed for communications with Adapter for ServiceNow.</td>
+    <td style="padding:15px">This call will take the provided property and technique, and return the property encrypted with the technique. This allows the property to be used in the adapterProps section for the credential password so that the password does not have to be in clear text. The adapter will decrypt the property as needed for communications with Adapter for Microsoft Graph.</td>
     <td style="padding:15px">No</td>
   </tr>
   <tr>

package/CHANGELOG.md

@@ -1,4 +1,20 @@
 
+## 1.4.0 [08-05-2024]
+
+* Minor/2024 auto migration
+
+See merge request itentialopensource/adapters/cloud/adapter-microsoft_graph!11
+
+---
+
+## 1.3.5 [03-28-2024]
+
+* Changes made at 2024.03.28_13:10PM
+
+See merge request itentialopensource/adapters/cloud/adapter-microsoft_graph!10
+
+---
+
 ## 1.3.4 [03-21-2024]
 
 * Changes made at 2024.03.21_13:42PM

package/PROPERTIES.md

@@ -97,6 +97,7 @@ This section defines **all** the properties that are available for the adapter,
         }
       },
       "devicebroker": {
+        "enabled": false,
         "getDevice": [
           {
             "path": "/call/to/get/device/details",
@@ -580,6 +581,10 @@ The device broker section defines the properties used integrate Microsoft_graph
     <th bgcolor="lightgrey" style="padding:15px"><span style="font-size:12.0pt">Property</span></th>
     <th bgcolor="lightgrey" style="padding:15px"><span style="font-size:12.0pt">Description</span></th>
   </tr>
+  <tr>
+    <td style="padding:15px">enabled</td>
+    <td style="padding:15px">Whether or not the device broker calls have been mapped.</td>
+  </tr>
   <tr>
     <td style="padding:15px">getDevice</td>
     <td style="padding:15px">The array of calls used to get device details for the broker</td>

package/README.md

@@ -4,29 +4,49 @@
 
 Some of the page links in this document and links to other GitLab files do not work in Confluence however, the information is available in other sections of the Confluence material.
 
-- [Overview](./SUMMARY.md)
-- [Versioning](#versioning)
-- [Supported IAP Versions](#supported-iap-versions)
-- [Getting Started](#getting-started)
-  - [Helpful Background Information](#helpful-background-information)
-  - [Prerequisites](#prerequisites)
-  - [How to Install](#how-to-install)
-  - [Testing](#testing)
-- [Configuration](./PROPERTIES.md)
-- [Using this Adapter](./CALLS.md)
+- [Specific to this Adapter](#specific-to-this-adapter)
   - [Authentication](./AUTH.md)
-- [Additional Information](#additional-information)
-  - [Enhancements](./ENHANCE.md)
-  - [Contributing](./CONTRIBUTING.md)
-  - [Helpful Links](#helpful-links)
-  - [Node Scripts](#node-scripts)
-- [Troubleshoot](./TROUBLESHOOT.md)
-- [License and Maintainers](#license-and-maintainers)
-- [Product License](#product-license)
+  - [Sample Properties](./sampleProperties.json)
+  - [Available Calls](./CALLS.md)
+  - [Swagger](./report/adapter-openapi.json)
+- [Generic Adapter Information](#generic-adapter-information)
+  - [Overview](./SUMMARY.md)
+  - [Versioning](#versioning)
+  - [Supported IAP Versions](#supported-iap-versions)
+  - [Getting Started](#getting-started)
+    - [Helpful Background Information](#helpful-background-information)
+    - [Prerequisites](#prerequisites)
+    - [How to Install](#how-to-install)
+    - [Testing](#testing)
+  - [Configuration](./PROPERTIES.md)
+  - [Additional Information](#additional-information)
+    - [Enhancements](./ENHANCE.md)
+    - [Contributing](./CONTRIBUTING.md)
+    - [Helpful Links](#helpful-links)
+    - [Node Scripts](#node-scripts)
+  - [Troubleshoot](./TROUBLESHOOT.md)
+  - [License and Maintainers](#license-and-maintainers)
+  - [Product License](#product-license)
+
+
+## Specific to this Adapter
 
-## [Overview](./SUMMARY.md)
+### [Authentication](./AUTH.md)
+
+### [Sample Properties](./sampleProperties.json)
+
+<a href="./sampleProperties.json" target="_blank">Sample Properties</a> can be used to help you configure the adapter in the Itential Automation Platform. You will need to update connectivity information such as the host, port, protocol and credentials.
+
+### [Available Calls](./CALLS.md)
+
+### [Swagger](./report/adapter-openapi.json)
+
+
+## Generic Adapter Information
 
-## Versioning
+### [Overview](./SUMMARY.md)
+
+### Versioning
 
 Itential Product and opensource adapters utilize SemVer for versioning. The current version of the adapter can be found in the `package.json` file or viewed in the IAP GUI on the System page. All Itential opensource adapters can be found in the <a href="https://gitlab.com/itentialopensource/adapters" target="_blank">Itential OpenSource Repository</a>.
 
@@ -34,7 +54,7 @@ Any release prior to 1.0.0 is a pre-release. Initial builds of adapters are gene
 
 Release notes can be viewed in CHANGELOG.md.
 
-## Supported IAP Versions
+### Supported IAP Versions
 
 Itential Product adapters are built for particular versions of IAP and packaged with the versions they work with. 
 
@@ -42,11 +62,11 @@ Itential opensource adapter as well as custom adapters built with the Itential A
 
 Many of the scripts that come with all adapters built using the Itential Adapter Builder do have some dependencies on IAP or the IAP database schema and so it is possible these scripts could stop working in different versions of IAP. If you notify Itential of any issues, the Adapter Team will attempt to fix the scripts for newer releases of IAP.
 
-## Getting Started
+### Getting Started
 
 These instructions will help you get a copy of the project on your local machine for development and testing. Reading this section is also helpful for deployments as it provides you with pertinent information on prerequisites and properties.
 
-### Helpful Background Information
+#### Helpful Background Information
 
 There is <a href="https://docs.itential.com/opensource/docs/adapters" target="_blank">Adapter documentation available on the Itential Documentation Site</a>. This documentation includes information and examples that are helpful for:
 
@@ -67,7 +87,7 @@ Troubleshooting an Adapter
 Others will be added over time.
 Want to build a new adapter? Use the <a href="https://adapters.itential.io" target="_blank">Itential Adapter Builder</a>
 
-### Prerequisites
+#### Prerequisites
 
 The following is a list of required packages for installation on the system the adapter will run on:
 
@@ -154,7 +174,7 @@ eslint-plugin-json
 testdouble
 ```
 
-### How to Install
+#### How to Install
 
 1. Set up the name space location in your IAP node_modules.
 
@@ -167,8 +187,8 @@ if the @itentialopensource directory does not exist, create it:
 2. Clone/unzip/tar the adapter into your IAP environment.
 
 ```bash
-cd \@itentialopensource
-git clone git@gitlab.com:\@itentialopensource/adapters/adapter-microsoft_graph
+cd @itentialopensource
+git clone git@gitlab.com:@itentialopensource/adapters/adapter-microsoft_graph
 or
 unzip adapter-microsoft_graph.zip
 or
@@ -196,30 +216,11 @@ systemctl restart pronghorn
 
 7. Change the adapter service instance configuration (host, port, credentials, etc) in IAP Admin Essentials GUI
 
-
-For an easier install of the adapter use npm run adapter:install, it will install the adapter in IAP. Please note that it can be dependent on where the adapter is installed and on the version of IAP so it is subject to fail. If using this, you can replace step 3-5 above with these:
-
-3. Install adapter dependencies and check the adapter.
-
-```bash
-cd adapter-microsoft_graph
-npm run adapter:install
-```
-
-4. Restart IAP
-
-```bash
-systemctl restart pronghorn
-```
-
-5. Change the adapter service instance configuration (host, port, credentials, etc) in IAP Admin Essentials GUI
-
-
-### Testing
+#### Testing
 
 Mocha is generally used to test all Itential Opensource Adapters. There are unit tests as well as integration tests performed. Integration tests can generally be run as standalone using mock data and running the adapter in stub mode, or as integrated. When running integrated, every effort is made to prevent environmental failures, however there is still a possibility.
 
-#### Unit Testing
+##### Unit Testing
 
 Unit Testing includes testing basic adapter functionality as well as error conditions that are triggered in the adapter prior to any integration. There are two ways to run unit tests. The prefered method is to use the testRunner script; however, both methods are provided here.
 
@@ -232,7 +233,7 @@ npm run test:baseunit
 
 To add new unit tests, edit the `test/unit/adapterTestUnit.js` file. The tests that are already in this file should provide guidance for adding additional tests.
 
-#### Integration Testing - Standalone
+##### Integration Testing - Standalone
 
 Standalone Integration Testing requires mock data to be provided with the entities. If this data is not provided, standalone integration testing will fail. When the adapter is set to run in stub mode (setting the stub property to true), the adapter will run through its code up to the point of making the request. It will then retrieve the mock data and return that as if it had received that data as the response from Microsoft_graph. It will then translate the data so that the adapter can return the expected response to the rest of the Itential software. Standalone is the default integration test.
 
@@ -247,7 +248,7 @@ npm run test:integration
 
 To add new integration tests, edit the `test/integration/adapterTestIntegration.js` file. The tests that are already in this file should provide guidance for adding additional tests.
 
-#### Integration Testing
+##### Integration Testing
 
 Integration Testing requires connectivity to Microsoft_graph. By using the testRunner script it prevents you from having to edit the integration test. It also resets the integration test after the test is complete so that credentials are not saved in the file.
 
@@ -263,23 +264,19 @@ Test should also be written to clean up after themselves. However, it is importa
 
 > **Reminder**: Do not check in code with actual credentials to systems.
 
-## [Configuration](./PROPERTIES.md)
-
-## [Using this Adapter](./CALLS.md)
-
-### [Authentication](./AUTH.md)
+### [Configuration](./PROPERTIES.md)
 
-## Additional Information
+### Additional Information
 
-### [Enhancements](./ENHANCE.md)
+#### [Enhancements](./ENHANCE.md)
 
-### [Contributing](./CONTRIBUTING.md)
+#### [Contributing](./CONTRIBUTING.md)
 
-### Helpful Links
+#### Helpful Links
 
 <a href="https://docs.itential.com/opensource/docs/adapters" target="_blank">Adapter Technical Resources</a>
 
-### Node Scripts
+#### Node Scripts
 
 There are several node scripts that now accompany the adapter. These scripts are provided to make several activities easier. Many of these scripts can have issues with different versions of IAP as they have dependencies on IAP and Mongo. If you have issues with the scripts please report them to the Itential Adapter Team. Each of these scripts are described below.
 
@@ -331,9 +328,9 @@ There are several node scripts that now accompany the adapter. These scripts are
 </table>
 <br>
 
-## [Troubleshoot](./TROUBLESHOOT.md)
+### [Troubleshoot](./TROUBLESHOOT.md)
 
-## License and Maintainers
+### License and Maintainers
 
 ```text
 Itential Product Adapters are maintained by the Itential Product Team.
@@ -341,6 +338,6 @@ Itential OpenSource Adapters are maintained by the Itential Adapter Team and the
 Custom Adapters are maintained by other sources.
 ```
 
-## Product License
+### Product License
 
 [Apache 2.0](./LICENSE)

package/SUMMARY.md

@@ -1,8 +1,8 @@
 ## Overview
 
-This adapter is used to integrate the Itential Automation Platform (IAP) with the Microsoft Graph System. The API that was used to build the adapter for Microsoft Graph is usually available in the report directory of this adapter. The adapter utilizes the Microsoft Graph API to provide the integrations that are deemed pertinent to IAP. The ReadMe file is intended to provide information on this adapter it is generated from various other Markdown files.
+This adapter is used to integrate the Itential Automation Platform (IAP) with the Microsoft_graph System. The API that was used to build the adapter for Microsoft_graph is usually available in the report directory of this adapter. The adapter utilizes the Microsoft_graph API to provide the integrations that are deemed pertinent to IAP. The ReadMe file is intended to provide information on this adapter it is generated from various other Markdown files.
 
->**Note**: It is possible that some integrations will be supported through the Microsoft Graph adapter while other integrations will not. If you need additional API calls, you can use the Update capabilities provided by the Adapter Builder or request Itential to add them if the Adapter is an Itential opensourced adapter.
+>**Note**: It is possible that some integrations will be supported through the Microsoft_graph adapter while other integrations will not. If you need additional API calls, you can use the Update capabilities provided by the Adapter Builder or request Itential to add them if the Adapter is an Itential opensourced adapter.
 
 Itential provides information on all of its product adapters in the Customer Knowledge Base. Information in the <a href="https://itential.atlassian.net/servicedesk/customer/portals" target="_blank">Customer Knowledge Base</a> is consistently maintained and goes through documentation reviews. As a result, it should be the first place to go for information.
 

package/SYSTEMINFO.md

@@ -1,4 +1,4 @@
-# Microsoft_graph
+# Microsoft Graph
 
 Vendor: Microsoft
 Homepage: https://www.microsoft.com/en-us/
@@ -7,15 +7,22 @@ Product: Microsoft Graph
 Product Page: https://learn.microsoft.com/en-us/graph/overview/
 
 ## Introduction
-We classify Microsoft Graph into the Cloud domain as Graph provides Cloud Services.
+We classify Microsoft Graph into the Cloud domain as Microsoft Graph serves as a gateway to accessing and integrating data and services across Microsoft 365.
 
 "Microsoft Graph is the gateway to data and intelligence in Microsoft 365."
 "It provides a unified programmability model that you can use to access the tremendous amount of data in Microsoft 365, Windows, and Enterprise Mobility + Security."  
 
 ## Why Integrate
-The Microsoft Graph adapter from Itential is used to integrate the Itential Automation Platform (IAP) with AMicrosoft Graph. With this adapter you have the ability to perform operations such as:
+The Microsoft Graph adapter from Itential is used to integrate the Itential Automation Platform (IAP) with Microsoft Graph. With this adapter you have the ability to perform operations such as:
 
 - Build apps for organizations and consumers. 
+- AzureAD
+- Files
+- Groups
+- People
+- SharePoint
+- Subscriptions
+- Users
 
 ## Additional Product Documentation
 The [API documents for Microsoft Graph](https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0)

package/TAB1.md

@@ -0,0 +1,17 @@
+# Overview 
+
+This adapter is used to integrate the Itential Automation Platform (IAP) with the Microsoft_graph System. The API that was used to build the adapter for Microsoft_graph is usually available in the report directory of this adapter. The adapter utilizes the Microsoft_graph API to provide the integrations that are deemed pertinent to IAP. The ReadMe file is intended to provide information on this adapter it is generated from various other Markdown files.
+
+## Details 
+The Microsoft Graph adapter from Itential is used to integrate the Itential Automation Platform (IAP) with Microsoft Graph. With this adapter you have the ability to perform operations such as:
+
+- Build apps for organizations and consumers. 
+- AzureAD
+- Files
+- Groups
+- People
+- SharePoint
+- Subscriptions
+- Users
+
+For further technical details on how to install and use this adapter, please click the Technical Documentation tab.