Google Apps Data Collectors and AFX Connectors fails with authentication errors in RSA Identity Governance & Lifecycle
2 years ago
Originally Published: 2017-11-08
Article Number
000041564
Applies To
RSA Product Set: Identity Governance & Lifecycle 
RSA Version/Condition: 6.9.1
 
Issue
Google Apps Data Collectors and AFX Connectors throw an error in the user interface when performing a Test of the collector or connector.
 
com.google.gdata.util.AuthenticationException: Error authenticating (check service name).
Caused by com.google.gdata.util.AuthenticationException: Error authenticating (check service name)
Caused By Stack com.aveksa.common.ConnectException: com.google.gdata.util.AuthenticationException:
Error authenticating (check service name)
at com.aveksa.collector.googleapps.adc.GoogleAppsAccountDataReader.getUserService(GoogleAppsAccountDataReader.java:139)
at com.aveksa.collector.googleapps.adc.GoogleAppsAccountDataReader.testConnection(GoogleAppsAccountDataReader.java:91)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:351)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectTestData(AccountDataCollector.java:277)
at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:533)

 
The same errors show in the log files if an attempt is made to run a full collection or use the connector in a request (i.e. not testing.)
Cause
Google has disabled Client interface login and forces the use of OAuth 2.0 for authentication which is not implemented in RSA Identity Governance & Lifecycle 6.9.1.
Resolution
This issue is resolved in RSA Identity Governance & Lifecycle 7.0.0 and above which have the latest implementation of Google Apps that allows the use of OAuth 2.0 for authentication.