Creating an Account WEBSERVICES

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello Community,

I am trying to test the creation of an account on a WEB Application i configured the test connection,account aggregation and create an account operations

And on the identityProfile on the active state i added on the Enable Tab my Source

But when i refresh an identity to test the creation i don’t see any provisioning ongoing

am i missing something? Is there a simple way to test the creation without using the IdentityProfile because i don’t have any entitlements for now for my source I only want to create the account,

Many thanks,

2

This will not create an account. This is to enable an account only if it already exists.

You need to set up a birth right role with an entitlement from the source to trigger the create account process

4

Hello Nithesh,

Thank you for your answer,

Are there any ways to tell ISC to create the account without using the entitlements?

5

You have to trigger creation from an entitlement being assigned. With a webservices connector however you can setup a ‘dummy’ entitlement and trigger creation based on that (ignoring the dummy entitlement in provisioning).

Check this topic for inspiration:

6

Hi Torry,

If this is a birthright access to every user then you may configure a Role with matching criteria to assign the access from this source and eventually trigger create account operation. If you are just testing if create account is working then you need make one of the access from this source as requesable via APs or Role or Entitlement (if feature is available) and raise the request from the Request Center.

7

Thank you for your answers @udayputta @sauvee ,

I have a special entitlement usecase :

I have this attibute called role but there’s no specific endpoint to get it

the only way to get it is in the account itself because it’s within reach with a GET USERS : When you do a GET USERS you’ll get the specific role too

How can i aggregate this entitlement? I already tried to add a new schema for this entitlement and i configured a new operation Group Aggregation - Role that is calling the Account Aggregation Operation first ( as a Parent) to get the role

Is this the way to get this entitlement?

Thank you,

8

I’ve seen this use case in the past as well.

It’s easiest to create a dummy user in the target system that has ALL entitlements that are available in the system. Then create a group aggregation operation that gets this single user and pull off all entitlements from the user.

9

Hello Edwin,

Thanks again for answering,

I am just trying to aggregate only one entitlement for now just to test but it doesn’t seem to work for me am i missing a step?

10

Can you share the raw response as well as your configured response mapping + schema? That way it’s easier to check what might be the issue.

11

Hello Back Edwin,

It worked i think it was a cache problem,

Thanks for the help