Sailpoint Identity IQ
18 min
this connector ingests data from the sailpoint identityiq and integrates it with swimlane prerequisites to set up the asset, you need the following inputs url username password capabilities the sailpoint identityiq connector integration provides the following capabilities get role by id get user by id get users api documentation link https //developer sailpoint com/iiq/api/ configurations http basic authentication authenticates using username and password configuration parameters parameter description type required url a url to the target host string required username username string required password password string required verify ssl verify ssl certificate boolean optional http proxy a proxy to route requests through string optional actions get role by id the role resource with matching id or name is returned attributes to include in the response can be specified with the 'attributes' query parameter attributes to exclude from the response can be specified with the 'excludedattributes' query parameter endpoint url /roles/ {{roleid}} method get input argument name type required description path parameters roleid string required id or name of role resource parameters lookupbyname boolean optional a boolean value that determines if the role resource will be looked up by name instead of id (value in path parameter 'roleid') setting this query parameter to true will cause the value pulled from the 'roleid' path parameter to be treated as a name when searching for the resource parameters attributes string optional the role attributes to include in the response the query parameter value is a comma separated list of fields to be returned in the response for each role parameters excludedattributes string optional the role attributes to exclude frome the response the query parameter value is a comma separated list of fields to be excluded from the response for each role input example {"parameters" {"lookupbyname"\ false,"attributes" "name,type","excludedattributes" "permits,requirements"},"path parameters" {"roleid" "c0b4568a4fe7458c434ee77d1fbt156b"}} output parameter type description status code number http status code of the response reason string response reason phrase id string unique identifier name string name of the resource descriptions array output field descriptions descriptions locale string output field descriptions locale descriptions value string value for the parameter type object type of the resource type iiq boolean type of the resource type requirements boolean type of the resource type permits boolean type of the resource type displayname string name of the resource type manualassignment boolean type of the resource type name string name of the resource type autoassignment boolean type of the resource type assignmentselector boolean type of the resource displayablename string name of the resource active boolean output field active activationdate string date value deactivationdate string date value owner object output field owner owner displayname string name of the resource owner value string value for the parameter owner $ref string output field owner $ref inheritance array output field inheritance output example {"status code" 200,"response headers" {"date" "fri, 06 oct 2023 06 05 14 gmt","content type" "application/json;charset=utf 8","transfer encoding" "chunked","connection" "keep alive","cache control" "no cache, no store, private, max age=0, must revalidate","strict transport security" "max age=31536000","x frame options" "sameorigin","x content type options" "nosniff"},"reason" "ok","json body" {"id" "c0b4568a4fe7458c434ee77d1fbt156b","name" "addirect production manager","descriptions" \[{}],"type" get user by id the user resource with matching id is returned there are attributes marked as 'returned only by request', such as roles, which must be provided as part of the attributes query parameter in order to be included in the response endpoint url /users/ {{userid}} method get input argument name type required description path parameters userid string required the id of user resource if lookupbyname is set to true, this path parameter should be set to the username of the user parameters attributes string optional a comma separated list of attributes to return in the response this query parameter supersedes excludedattributes, so providing the same attribute(s) to both will result in the attribute(s) being returned parameters excludedattributes string optional a comma separated list of attributes to exclude from the response some attributes cannot be excluded parameters lookupbyname boolean optional a boolean value that determines if the user resource will be looked up by username instead of userid (value in path parameter 'userid') setting this query parameter to true will cause the value pulled from the 'userid' path parameter to be treated as a username when searching for the resource input example {"parameters" {"attributes" "name,type","excludedattributes" "permits,requirements","lookupbyname"\ false},"path parameters" {"userid" "c0b4568a4fe7458c434ee77d1fbt156b"}} output parameter type description status code number http status code of the response reason string response reason phrase id string unique identifier username string name of the resource name object name of the resource name formatted string name of the resource name familyname string name of the resource name givenname string name of the resource displayname string name of the resource usertype string type of the resource active boolean output field active emails array output field emails emails type string type of the resource emails value string value for the parameter emails primary string output field emails primary urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user object output field urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts array output field urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user accounts urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts displayname string name of the resource urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts value string value for the parameter urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts $ref string output field urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user accounts $ref urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user entitlements array output field urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user entitlements urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user entitlements value string value for the parameter urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user entitlements display string output field urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user entitlements display urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user entitlements type string type of the resource urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user entitlements application string output field urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user entitlements application output example {"status code" 200,"response headers" {"date" "fri, 06 oct 2023 06 05 14 gmt","content type" "application/json;charset=utf 8","transfer encoding" "chunked","connection" "keep alive","cache control" "no cache, no store, private, max age=0, must revalidate","strict transport security" "max age=31536000","x frame options" "sameorigin","x content type options" "nosniff"},"reason" "ok","json body" {"id" "c0b4568a4fe7458c434ee77d1fbt156b","username" "mock user","name" {"formatted" "ms barbara j jense get users this endpoint returns all user resources there are attributes marked as 'returned only by request', such as roles, which must be provided as part of the attributes query parameter in order to be included in the response endpoint url /users method get input argument name type required description parameters filter string optional allows for query filters according to rfc 7644, section 3 4 2 2 not all operations are supported parameters sortby string optional allows sorting the results by a resource's attributes parameters sortorder string optional determines what order to sort results in parameters startindex number optional determines the starting index of the result set parameters count number optional specifies the number of results per page parameters attributes string optional a comma separated list of attributes to return in the response this query parameter supersedes excludedattributes, so providing the same attribute(s) to both will result in the attribute(s) being returned parameters excludedattributes string optional a comma separated list of attributes to exclude from the response some attributes cannot be excluded input example {"parameters" {"filter" "string","sortby" "string","sortorder" "ascending","startindex" 1,"count" 1000,"attributes" "string","excludedattributes" "string"}} output parameter type description status code number http status code of the response reason string response reason phrase totalresults string result of the operation startindex number output field startindex schemas array output field schemas resources array output field resources resources id string unique identifier resources username string name of the resource resources name object name of the resource resources name formatted string name of the resource resources name familyname string name of the resource resources name givenname string name of the resource resources displayname string name of the resource resources usertype string type of the resource resources active boolean output field resources active resources emails array output field resources emails resources emails type string type of the resource resources emails value string value for the parameter resources emails primary string output field resources emails primary resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user object output field resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts array output field resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user accounts resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts displayname string name of the resource resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts value string value for the parameter resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user accounts $ref string output field resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user accounts $ref resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0\ user entitlements array output field resources urn\ ietf\ params\ scim\ schemas\ sailpoint 1 0 \ user entitlements output example {"status code" 200,"response headers" {"date" "fri, 06 oct 2023 06 05 14 gmt","content type" "application/json;charset=utf 8","transfer encoding" "chunked","connection" "keep alive","cache control" "no cache, no store, private, max age=0, must revalidate","strict transport security" "max age=31536000","x frame options" "sameorigin","x content type options" "nosniff"},"reason" "ok","json body" {"totalresults" "18,","startindex" 1,"schemas" \["urn\ ietf\ params\ scim\ api\ messages 2 0\ listresponse"],"r response headers header description example cache control directives for caching mechanisms no cache, no store, private, max age=0, must revalidate connection http response header connection keep alive content type the media type of the resource application/json;charset=utf 8 date the date and time at which the message was originated fri, 06 oct 2023 06 05 14 gmt strict transport security http response header strict transport security max age=31536000 transfer encoding http response header transfer encoding chunked x content type options http response header x content type options nosniff x frame options http response header x frame options sameorigin