Calling a Web Service Application from a JDBC Application Provisioning Rule in SailPoint IdentityIQ

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

I need to create a JDBC application in SailPoint IdentityIQ, but when assigning or revoking permissions, the operation must be done via an API, and certain actions are required after authenticating with an access token. To avoid repeating the authentication process, a separate Web Service application has been created to handle the connection between IIQ and the API.

Is it possible to call this Web Service application from within the JDBC application provisioning rule and perform the necessary operations without needing to authenticate again?

Thanks and regards,
Antonio.

2

Hi @AntonioGvtt,

yes, you can use ConnectorFactory that create a application instance, like this:
Connector cnt = ConnectorFactory.getConnector(application,null);

or you can make the api call directly into the before\after provising rule

3

Hi @enistriminsait Thank you for the prompt response!

If I understand correctly, by creating the connection using ConnectorFactory with the application for the API, since the authentication is already handled in the application’s configuration, it would only be necessary to use this connection to make the API calls for the operations I need. Is that correct?

4

Yes.
There you can find an example hwo to use the getObject operation.
For the other operation of webservice you can use getConnectorServices() funcion that return a openconnector.ConnectorServices object:

image
image484×155 2.51 KB

on this object you can find the operations

5

Try using a dual channel configuration. Reference: https://community.sailpoint.com/t5/IdentityIQ-Forum/Mixed-connector-for-in-outbound/m-p/131985