Add group to the user via Webservice SaaS Connector

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello Everyone,

I’m currently working on WebService SaaS connector and stuck with add entitlement method.
So, my application doesnt support calling user api and then pass group details to add the entitlements. It supports calling group api and pass user id details thus, have configured my “Add Entitlement” method as http call “/scim/v2/groups/$plan.groups$” with below body
{
“operations”: [
{
“value”: [
{
“value”: “$plan.id$”
}
],
“path”: “MEMBERS”,
“op”: “add”
}
]
}
My call is passed but entitlement not added to the application. Any suggestions or has anyone experienced this.

Many Thanks!!

2

@NeetuDixit if the application is supporting SCIM you can try to use a scim connector to manage these operation easily

Thanks
Shantanu

3

nope, api has the SCIM name in it but doesnt support SCIM. we tried with SCIM connector.

4

@NeetuDixit did you bring in the entitlements and have added the entitlement types using entitlement aggregation operation.
you need to use $plan.nativeIdentity$ for passing the users

Thanks
Shantanu

5

Hi @NeetuDixit ,

Did you try using Postman?

Instead of passing group name in the URL, can you try passing groupId? $plan.groupId$. Check the provisioning plan and see if group Id is coming there.

Also, this should be “value”: “$plan.nativeIdentity$”

6

groups attribute holds the group id. As my user schema & group schema both had the ID hence configured groups as the id & groupname as the group description attribute in the schema.

7

posting for closure.

This worked with the same body and api. Content-Type header with value as “application/json-patch+json” was creating the issue. After removing the header, SailPoint able to add entitlement to the source.