Hi,
I have the problem that my jobs in Operate don’t get a worker from Connectors assigned. see these metadata infos from a node:
{
"calledProcessDefinitionName": null,
"calledDecisionDefinitionName": null,
"jobRetries": 3,
"jobDeadline": null,
"jobKey": "2251799813692806",
"jobType": "io.camunda:http-json:1",
"jobWorker": "",
"jobCustomHeaders": {
"elementTemplateId": "io.camunda.connectors.HttpJson.v2",
"elementTemplateVersion": "12",
"retryBackoff": "PT0S",
"resultVariable": "response"
},
so nothing happens with the process and is stuck at this node.
I configured authentication via Entra ID with the orchestration service with the official documentation, see my config:
connectors:
enabled: true
contextPath: "/connectors"
configuration: |-
camunda:
client:
mode: self-managed
grpc-address: "http://${namespace_name}-${stage}-zeebe-gateway:26500"
rest-address: "http://${namespace_name}-${stage}-zeebe-gateway:8080"
auth:
method: oidc
client-id: ${microsoft_client_id_connectors}
client-secret: "${connector_secret}"
token-url: "https://login.microsoftonline.com/${microsoft_tenant_id}/oauth2/v2.0/token"
audience: ${microsoft_client_id_orchestration}
scope: "${microsoft_client_id_orchestration}/.default"
security:
authentication:
method: "oidc"
oidc:
clientId: ${microsoft_client_id_connectors}
audience: ${microsoft_client_id_orchestration}
secret:
existingSecret: "${namespace_name}-${stage}"
existingSecretKey: "connectors-secret"
tokenScope: "${microsoft_client_id_orchestration}/.default"
I checked the connection with a port redirect and with my Connectors client credentials and it is working but nothing is returned for jobs:
curl -i -sS -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" "http://127.0.0.1:8080/v2/jobs/activation" -d '{
"type":"io.camunda:http-json:1",
"worker":"diag",
"timeout":60000,
"maxJobsToActivate":1
}'
HTTP/1.1 200
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self'; base-uri 'self'; script-src 'self' https: *.chargebee.com *.mixpanel.com ajax.cloudflare.com static.cloudflareinsights.com; script-src-elem 'self' cdn.jsdelivr.net ; connect-src 'self' https: *.mixpanel.com cloudflareinsights.com *.appcues.net wss://api.appcues.net cdn.jsdelivr.net; style-src 'self' https: 'unsafe-inline' cdn.jsdelivr.net *.googleapis.com *.chargebee.com; img-src data: 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https: *.chargebee.com blob: ; object-src 'self' blob:; font-src 'self' data: fonts.camunda.io cdn.jsdelivr.net; worker-src 'self' blob:; child-src; script-src-attr 'none'
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), language-detector=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), summarizer=(), translator=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=()
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Resource-Policy: same-site
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 29 Jan 2026 13:33:24 GMT
{"jobs":[]}
I set the necessary permissions for process_definition in identity for the Connectors client id too.
Do I miss something in my config or is something wrong?
Kind Regards,
Julian
