Deleted Source but accounts still attached to identities

Identity Security Cloud (ISC) ISC Discussion and Questions
1

I deleted a source that had many accounts correlated to identities. I accidentally did not reset the accounts before deleting the source. This left all of the accounts still correlated to the identities even though the source is gone. I can remove these accounts manually but there are over 100,000 of them. I have tried many of the API’s and none of them work. I do have the old sourceID of this application but I dont know how to have all of these accounts deleted from the identities.

2

Hi @UCChris

You can get the list of accountIDs using the sourceId of the deleted source and then use remove account API to remove/uncorrelate the account from the identities one by one. You can use postman scripts to do that.

POST https://<tenant>.api.identitynow.com/beta/accounts/<account id>/remove

Thanks,
Shailee

3

Thanks Shailee,

I ran POST https://.api.identitynow.com/v3/accounts?sourceId=:id

This gave me a large json object.

I don’t see the end point you pasted above in my API BETA collection.

I see DELETE https://.api.identitynow.com/beta/accounts/:id

Am I missing something?

4

Hi @UCChris ,

Yes, Remove Account API is not available in the postman, you can duplicate the Unlock account API and change the API as below :

https://.api.identitynow.com/beta/accounts/:id/remove

Please make sure that the HTTP method is POST

This API works fine.

5

Hi @UCChris

Yes, I agree with @shaileeM, you will need to use the REMOVE endpoint to make sure that accounts are removed from IdentityNow’s knowledge space.

In general, i would advice to run first source reset (for both account and entitlement ) before source delete so that they do not need to be processed manually later.

Thank You.
Regards
Vikas.

6

@UCChris,

You can use below two API in combination and create a simple script to get the ID’s in code and then trigger the removal using the other API.

In the get account you can restrict the return of account by giving source ID.

https://sailpoint.api.identitynow.com/v3/accounts

https://sailpoint.api.identitynow.com/v3/accounts/:id

Let us know if further input is needed.

Thanks

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.