Sailpoint Identity Now
This Connector ingests data from the Sailpoint IdentityNow and integrates it with Swimlane.
Prerequisites
To set up the asset, you need the following inputs:
- URL
- Client ID
- Client Secret
- Token URL
Capabilities
The Sailpoint IdentityNow Connector integration provides the following capabilities:
- Get Accounts
- Get Account Activities
- Get Profiles Identities
- Get Access Profiles
- Get Roles
Note
For task Get Accounts, the Filtering is supported for the following fields and operators:
- id: eq, in
- identityId: eq
- name: eq, in
- nativeIdentity: eq, in
- sourceId: eq, in
- uncorrelated: eq
For task Get Account Activities, the Filtering is supported for the following fields and operators:
- type: eq, in
- created: gt, lt, ge, le
- modified: gt, lt, ge, le
API Documentation Link
Configurations
Oauth 2.0 Client Credentials
Authenticates using oauth 2.0 client credentials
Configuration Parameters
Parameter | Description | Type | Required |
|---|---|---|---|
url | A URL to the target host. | string | Required |
token_url | ο»Ώ | string | Required |
client_id | The client ID | string | Required |
client_secret | The client secret. | string | Required |
scope | Permission scopes for this action. | array | Optional |
verify_ssl | Verify SSL certificate | boolean | Optional |
http_proxy | A proxy to route requests through. | string | Optional |
Actions
Get Access Profiles
This will give Access profiles by using ID.
Endpoint
- URL: /access-profiles/:{{id}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.id | string | Required | Parameters for the Get Access Profiles action |
Input Example
{"path_parameters":{"id":"2c9180837ca6693d017ca8d097500149"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
id | string | Unique identifier |
name | string | Name of the resource |
description | string | Output field: description |
created | string | Output field: created |
modified | string | Output field: modified |
enabled | boolean | Output field: enabled |
owner | object | Output field: owner |
owner.type | string | Type of the resource |
owner.id | string | Unique identifier |
owner.name | string | Name of the resource |
source | object | Output field: source |
source.id | string | Unique identifier |
source.type | string | Type of the resource |
source.name | string | Name of the resource |
entitlements | array | Output field: entitlements |
entitlements.id | string | Unique identifier |
entitlements.type | string | Type of the resource |
entitlements.name | string | Name of the resource |
requestable | boolean | Output field: requestable |
accessRequestConfig | object | Output field: accessRequestConfig |
accessRequestConfig.commentsRequired | boolean | Output field: accessRequestConfig.commentsRequired |
accessRequestConfig.denialCommentsRequired | boolean | Output field: accessRequestConfig.denialCommentsRequired |
accessRequestConfig.approvalSchemes | array | Output field: accessRequestConfig.approvalSchemes |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"id":"2c91808a7190d06e01719938fcd20792","name":"Employee-database-read-write","description":"Collection of entitlements to read/write the employee database","created":"2021-03-01T22:32:58.104Z","modified":"2021-03-02T20:22:28.104Z","enabled":true,"owner":{"type":"IDENTITY","id":"2c9180a46faadee4016fb4e018c20639","name":"support"},"source":{"id":"2c91809773dee3610173fdb0b6061ef4","type":"SOURCE","name":"ODS-AD-SOURCE"},"entitleme...
Get Account Activities
This will give a collection of account activities.
Endpoint
- URL: /account-activities
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.requested-for | string | Optional | Parameters for the Get Account Activities action |
parameters.requested-by | string | Optional | Parameters for the Get Account Activities action |
parameters.regarding-identity | string | Optional | Parameters for the Get Account Activities action |
parameters.limit | number | Optional | Parameters for the Get Account Activities action |
parameters.offset | number | Optional | Parameters for the Get Account Activities action |
parameters.count | boolean | Optional | Parameters for the Get Account Activities action |
parameters.filters | string | Optional | Parameters for the Get Account Activities action |
parameters.sorters | string | Optional | Parameters for the Get Account Activities action |
Input Example
{"parameters":{"requested-for":"2c91808568c529c60168cca6f90c1313","requested-by":"2c91808568c529c60168cca6f90c1313","regarding-identity":"2c91808568c529c60168cca6f90c1313","limit":250,"offset":0,"count":false,"filters":"Identity Refresh","sorters":"created"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":[{"id":"2c9180835d2e5168015d32f890ca1581","name":"2c9180835d2e5168015d32f890ca1581","created":"2017-07-11T18:45:37.098Z","modified":"2018-06-25T20:22:28.104Z","completed":"2018-10-19T13:49:37.385Z","completionStatus":"SUCCESS","type":"appRequest","requesterIdentitySummary":{},"targetIdentitySummary":{},"errors":[],"warnings":[],"items":[],"executionStatus":"COMPLETED","clientMetadata":{}}]}
Get Accounts
This returns a list of accounts.
Endpoint
- URL: /accounts
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.limit | number | Optional | Parameters for the Get Accounts action |
parameters.offset | number | Optional | Parameters for the Get Accounts action |
parameters.count | boolean | Optional | Parameters for the Get Accounts action |
parameters.filters | string | Optional | Parameters for the Get Accounts action |
parameters.sorters | string | Optional | Parameters for the Get Accounts action |
Input Example
{"parameters":{"limit":250,"offset":0,"count":false,"filters":"2c9180858082150f0180893dbaf44201","sorters":"id,name"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":[{"id":"id12345","name":"aName","created":"2015-05-28T14:07:17Z","modified":"2015-05-28T14:07:17Z","sourceId":"2c9180835d2e5168015d32f890ca1581","sourceName":"Employees","identityId":"2c9180835d2e5168015d32f890ca1581","attributes":{},"authoritative":false,"description":null,"disabled":false,"locked":false,"nativeIdentity":"552775","systemAccount":false,"uncorrelated":false}]}
Get Profiles Identities
This returns a single Identity Profile based on ID.
Endpoint
- URL: /identity-profiles/:{{identity-profile-id}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.identity-profile-id | string | Required | Parameters for the Get Profiles Identities action |
Input Example
{"path_parameters":{"identity-profile-id":"2b838de9-db9b-abcf-e646-d4f274ad4238"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
id | string | Unique identifier |
name | string | Name of the resource |
created | string | Output field: created |
modified | string | Output field: modified |
description | string | Output field: description |
owner | object | Output field: owner |
owner.type | string | Type of the resource |
owner.id | string | Unique identifier |
owner.name | string | Name of the resource |
priority | number | Output field: priority |
authoritativeSource | object | Output field: authoritativeSource |
authoritativeSource.type | string | Type of the resource |
authoritativeSource.id | string | Unique identifier |
authoritativeSource.name | string | Name of the resource |
identityRefreshRequired | boolean | Unique identifier |
identityCount | number | Unique identifier |
identityAttributeConfig | object | Unique identifier |
identityAttributeConfig.enabled | boolean | Unique identifier |
identityAttributeConfig.attributeTransforms | array | Unique identifier |
identityAttributeConfig.attributeTransforms.identityAttributeName | string | Unique identifier |
identityAttributeConfig.attributeTransforms.transformDefinition | object | Unique identifier |
identityAttributeConfig.attributeTransforms.transformDefinition.type | string | Unique identifier |
identityAttributeConfig.attributeTransforms.transformDefinition.attributes | object | Unique identifier |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"id":"id12345","name":"aName","created":"2015-05-28T14:07:17Z","modified":"2015-05-28T14:07:17Z","description":"My custom flat file profile","owner":{"type":"IDENTITY","id":"2c9180835d191a86015d28455b4b232a","name":"William Wilson"},"priority":10,"authoritativeSource":{"type":"SOURCE","id":"2c9180835d191a86015d28455b4b232a","name":"HR Active Directory"},"identityRefreshRequired":true,"identityCount":8,"identityAttributeConfig":{...
Get Roles
This will returns a Role by its ID.
Endpoint
- URL: /roles/:{{id}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.id | string | Required | Parameters for the Get Roles action |
Input Example
{"path_parameters":{"id":"2c91808a7813090a017814121e121518"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
id | string | Unique identifier |
name | string | Name of the resource |
created | string | Output field: created |
modified | string | Output field: modified |
description | string | Output field: description |
owner | object | Output field: owner |
owner.type | string | Type of the resource |
owner.id | string | Unique identifier |
owner.name | string | Name of the resource |
accessProfiles | array | Output field: accessProfiles |
accessProfiles.id | string | Unique identifier |
accessProfiles.type | string | Type of the resource |
accessProfiles.name | string | Name of the resource |
membership | object | Output field: membership |
membership.type | string | Type of the resource |
membership.criteria | object | Output field: membership.criteria |
membership.criteria.operation | string | Output field: membership.criteria.operation |
membership.criteria.key | object | Output field: membership.criteria.key |
membership.criteria.key.type | string | Type of the resource |
membership.criteria.key.property | string | Output field: membership.criteria.key.property |
membership.criteria.key.sourceId | string | Unique identifier |
membership.criteria.stringValue | string | Value for the parameter |
membership.criteria.children | array | Output field: membership.criteria.children |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"id":"2c918086749d78830174a1a40e121518","name":"Role 2567","created":"2021-03-01T22:32:58.104Z","modified":"2021-03-02T20:22:28.104Z","description":"Urna amet cursus pellentesque nisl orci maximus lorem nisl euismod fusce morbi p...","owner":{"type":"IDENTITY","id":"2c9180a46faadee4016fb4e018c20639","name":"support"},"accessProfiles":[{}],"membership":{"type":"IDENTITY_LIST","criteria":{},"identities":[]},"legacyMembershipInfo":...
Response Headers
Header | Description | Example |
|---|---|---|
Content-Type | The media type of the resource | application/json |
Date | The date and time at which the message was originated | Thu, 01 Jan 2024 00:00:00 GMT |