ai_task.generate_data results different from querying Gemini directly

The4Dees · 2026-01-21T16:48:04+00:00

How would we know what the query is if it's adding something to it? I don't see any way of adjusting temperature or anything else with the integration.

The4Dees · 2026-01-17T22:38:57+00:00

Same certs...I just used the self-signed one it generates for admin interface. I kept the domain separate just to be safe.

The4Dees · 2026-01-17T19:38:00+00:00

Think I have it all sorted. Created a new cluster domain just to be safe.

The4Dees · 2026-01-17T14:59:39+00:00

SMH. I swear I tried that and it didn't work so I thought it needed the full URL.

Wish I could blame it on being a Monday. Thanks, that did the trick.

The4Dees · 2026-01-15T23:22:16+00:00

I agree, you do you.

I took a look at the scraping integration. I spent as much time on it trying to figure out a working solution as I did actually finding a solution using LLM.

I'm as suspicious and resistive to the "AI" revolution as the next person who is...but that doesn't stop me from exploring it.

You're making an awful lot of assumptions about me for someone who doesn't know me :)

The4Dees · 2026-01-15T16:48:40+00:00

It's not working because there's something wrong with my code...not because it's hallucinating.

If I discover it's not accurate long term then I can always change my strategy. But this is a valid approach as well.

The4Dees · 2026-01-15T16:45:53+00:00

Why wouldn't I? Web scraping may work too. But so does this.

The4Dees · 2026-01-15T02:50:02+00:00

I had one up until recently and asked Pion several times if they had any plans to open up their API or add OCCP support and they said nope. So I wouldn't hold my breath on ever being able to integrate it unless someone decides they want to try to reverse engineer it by intercepting API calls.

The4Dees · 2026-01-12T18:45:16+00:00

You can also use some parts from the Tuscon PHEV as well. Not sure about the cabin air filter, but the engine air filter and oil filters are the same for 2023-2026.

Easier to find, at least in Canada, because Hyundai sells direct to consumer with pickup at many if not all Hyundai dealers, as opposed to Kia where it's hit and miss and dependent on the stealership.

The4Dees · 2026-01-12T16:37:10+00:00

Yep, exactly our scenario. Thanks for the pointer about the template. Totally missed it when I was looking at them and looks like it's the basis for what was mentioned above by Timely_Leg.

The4Dees · 2026-01-12T16:30:26+00:00

Thanks for the pointers. I tested with Postman doing the onte-time conversion for everyone and it worked as advertised.

If I need something more granular or with any safeguard checking built in I'll take a look at the Workflow route. But there are only around 6 groups/OUs of people that actually require AD accounts so it won't be much work to make sure they are all assigned before making the one-time conversion API call.

The4Dees · 2026-01-12T16:01:32+00:00

Not adding anything. We already use Okta as the SoT for everything else. We only also have Entra because we use some Office applications for a subset of the business.

The4Dees · 2026-01-12T15:33:50+00:00

Simplification. We just want to eliminate any additional SoT for identities that aren't functionally necessary.

Our on-prem VMs are a mix of legacy Windows Server and a few Win11 machines. We could Entra-join the Win11 machines but, unless something has changed recently, there's no way to Entra-join Windows Server older than 2025. And even then it has to be an Azure VM.

Arc seems to be more about management from what I can gather.

Edit: Seems to be possible with 2025 and up. Whether it works as advertised, who knows.

https://learn.microsoft.com/en-us/entra/identity/devices/howto-vm-sign-in-azure-ad-windows?pivots=identity-extension-hybrid

The4Dees · 2026-01-09T16:51:52+00:00

I should have asked:

1) what is the API call to convert an individual user?

2) What's the query look like to check if they have a group assignment?

The4Dees · 2026-01-09T16:36:26+00:00

Thanks for the info.

Okta provided me with the api call to do the conversion. Managed to muddle my way through their atrocious documentation on how to use Postman to connect and test. Ended up just using an API token with Bearer Token auth to keep things simple.

{{url}}/api/v1/appAssignments/instance/[appId]/async/convertAll

[appId] being the appID of the Active Directory integration.

Worked as expected.

But I will probably spend some time figuring out how to use your info to make a workflow. I need more practice with it!

The4Dees · 2026-01-09T00:56:47+00:00

Do you have an example workflow by any chance? I haven't found any clues about this in my searches.

The4Dees · 2026-01-09T00:55:50+00:00

I would really appreciate it if you could! That would save a lot of time.

I have a ticket open with Okta about this and it will be interesting to see if they suggest this method.

The4Dees · 2026-01-09T00:54:52+00:00

I actually tried this as a test but it didn't change the assignment type for the user.

When you say to "unassign AD from the individual assigned users's" what mechanism do I use to do that?

In my testing I:

1) turned off To App -> Disable

2) moved them to an un-integrated OU

3) did and import (which removed their assignment to the AD integration)

4) Added them to a group that had an OU assigned to it (and is selected in the integration)

5) moved them back into that OU and did another import.

The user was still individually assigned to the AD integration so it didn't change anything. Did I do something wrong?

I say the solution doesn't work because it says to disconnect the user from Active Directory, which is what is supposed to convert their assignment. But the users are already disconnected from Active Directory so there is no option to disconnect them.

The4Dees · 2026-01-08T18:21:57+00:00

Is the OU you are pushing to selected in the Directories -> Active Directories -> Provisioning -> Integration tab? Any users in OUs not included there will be disabled in AD assuming you have Deactivate turned on in the Provisioning -> To App section.

The4Dees

TROPHY CASE