I’m finding it difficult to configure SailPoint to provision users with specific roles using a web service connector. The GET /users-and-roles API returns a “Roles” field with comma-separated values, which I’ve configured as entitlements. The valid values for “Roles” are “Active”, “Admin”, and “Supervisor”.
Ex:
{
"name": "Test",
"email': "email",
"roles": "active,admin,supervisor"
}
When provisioning a new user, I can make a POST API call with the user’s email, first name, and last name, and the user is assigned the “Active” role by default.
{
"firstName": "Test",
"lastName': "lastName",
"email": "$plan.nativeIdentity$"
}
To assign additional roles, I can include “admin” or “supervisor” fields in the request body with a value of 1.
{
"firstName": "Test",
"lastName': "lastName",
"email": "$plan.nativeIdentity$",
"admin":1,
"supervisor":1
}
However, I’m unsure how to configure SailPoint to pass these additional role assignments from the Access Profile to the provisioning plan and ultimately to the HTTP request. Can anyone offer guidance on how to achieve this?
Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.