Automation of name change/ tasks within IIQ

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi,

Fore warning my IIQ knowledge is very limited

I’m trying to automate the name change process within Identity IQ 8.3
The current process is to complete this through the web interface the process is as follows

update the email within the identity warehouse(email, first / last name) > run a task: identity cub refresh single users > run a task: AD user aggregation

I started writing a Python web scrapper to work the web interface, but this isn’t ideal and would be quite fragile to change, I can see myself getting this completed … but would prefer a more robust solution

I did some reading about the IIQ Console it would seem it has some potential, their is also mention of IIQ plugins, can I write a small java app?

Ideally I just want something that can be executed from command line with some params to kick this whole process off.

Just hoping I can lean on the collective knowledge of the hive mind to get pointed in the right direction

Cheers,

Lewis

2

IdentityIQ has its own users (IIQ users like spadmin) that are stored within IdentityIQ’s database, then there are users from applications (external systems like Active Directory or LDAP).

If the later, then you just change the user information in the external system. IdentityIQ will update the information during next account aggregation.

If you want to change the IIQ users, then you can use a Run Rule Task (https://community.sailpoint.com/t5/IdentityIQ-Wiki/Run-Rule-Task-With-Custom-Input-and-Return-Values/ta-p/82497) to run a Rule. In the Rule you’d iterate the users (https://community.sailpoint.com/t5/Technical-White-Papers/BSDG-5-Querying-IdentityIQ-Objects/ta-p/73135) and modify their attributes (https://community.sailpoint.com/t5/Technical-White-Papers/BSDG-6-Committing-Changes-to-IdentityIQ-Objects/ta-p/73497).

Also note the last two examples are slightly out-dated. Since IIQ 8.0 a change related to Hibernate changes the way to iterate objects if you want to modify them. See https://community.sailpoint.com/t5/IdentityIQ-Wiki/IdentityIQ-8-0-and-commitTransaction-While-Using-an-Iterator/ta-p/143225

If anyone from SailPoint is watching: There are a lot of very useful documents in community.sailpoint.com. Any chance of having a read-only access to them when you search in developer.sailpoint.com?