# Aggregations in JDBC and Provisioning in Webservice

**URL:** <https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203>\
**Category:** SHF Discussion and Questions\
**Tags:** webservice-connector, provisioning, jdbc-connector, identity-security-cloud, aggregation\
**Created:** [July 7, 2025, 7:34pm UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203 "2025-07-07T19:34:57Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![ArielM](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@ArielM](https://developer.sailpoint.com/discuss/u/ArielM)\
**Post date:** [July 7, 2025, 7:34pm UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/1 "2025-07-07T19:34:57Z")

</div>

Hi team,

We have an integration where we perform provisioning using SOAP web services. As the client didn’t provide us with aggregation APIs, we are trying to use a JDBC connector to perform account aggregation.

I understand that this will work for full aggregation. My question is how will the provisioning operations work if I don’t have a Get object operation on my web service connector? Would a workaround such as performing a JDBC aggregation in an after operation rule work?

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [July 7, 2025, 8:03pm UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/2 "2025-07-07T20:03:36Z")

</div>

I love this requirement, I often see it in Microsoft Identity Manager, not in SailPoint world.

1. I really wish that we will be able to connect to a DB in WebServiceBefore Operation Rule, question is about JAR files, still I would give a try by writing complete Java code
2. Build a custom SaaS connector

---

<div class="post-metadata">

**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\
**Post date:** [July 8, 2025, 9:31am UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/3 "2025-07-08T09:31:34Z")

</div>

> [@ArielM](#):
>
> Would a workaround such as performing a JDBC aggregation in an after operation rule work?

You can make API calls in JDBC Provisioning rule. So have only JDBC source and instead of having SQL query to insert records make an API call

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [July 8, 2025, 9:35am UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/4 "2025-07-08T09:35:10Z")

</div>

Ya, this is better than JDBC Code in WebService Rules.

---

<div class="post-metadata">

**Author:** ![udayputta](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/udayputta/32/14195_2.png) [@udayputta](https://developer.sailpoint.com/discuss/u/udayputta)\
**Post date:** [July 8, 2025, 2:05pm UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/5 "2025-07-08T14:05:30Z")

</div>

Really a interesting use case. If the client did not provide aggregation endpoints, how will you know which access should be made as requestable. If you are using JDBC source entitlements to be requested then the provisioning would be sent to that source instead of WebService Source.  
If this is the case I was thinking you can also use a BPR rule to create an account request for WebService source and provision the access by using the connector without much customization. Here one question would be what will happen to the JDBC account request in the plan. I think that should be removed and plan should be returned only with webservice account request.

---

<div class="post-metadata">

**Author:** ![ArielM](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@ArielM](https://developer.sailpoint.com/discuss/u/ArielM)\
**Post date:** [July 8, 2025, 4:16pm UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/6 "2025-07-08T16:16:09Z")

</div>

The webservice connector contains the entitlements. I would also have to do the entitlements API calls within a rule, so I only use the JDBC connector.

This is a good approach to have the Single account aggregation and not wait for full aggregation to read the provisioning changes.

Thanks for the answers!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 6, 2025, 4:16pm UTC](https://developer.sailpoint.com/discuss/t/aggregations-in-jdbc-and-provisioning-in-webservice/153203/7 "2025-09-06T16:16:37Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
