Developing Standard reports in Identitynow

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi Experts,

I’m trying to develop a custom reports to show inactive users on each of my source in Identitynow. Could someone please help me with guide / document to develop this using API.

2

Hi Chandra,

To assist the community in answering your question, can you provide some more information?

  • By user, do you mean identity?
  • How do you plan on determining if a user is inactive? Is it based on their lifecycle state?
  • Have you tried any solutions yet? If so, what have you tried and where did it fail?
3

Hi Colin,

Thanks for the reply.

  • By user, do you mean identity? Actually I’m to prepare the report of user accounts that have not been logged into the app for atleast 45 days.
  • How do you plan on determining if a user is inactive? Is it based on their lifecycle state? - I’m looking inactive report for accounts in Inow source where I use the Days since last login (Calculated) to decide if the Account Status is to Disabled or not.
  • Have you tried any solutions yet? If so, what have you tried and where did it fail? - I have not tried any solution yet.
4

Is Days since last login (Calculated) an account attribute on your source? Where does this value come from?

5

@colin_mckibben

No its not an attribute, It is just calculated from the LAST_LOGIN date (attribute onthe source).

6

There might be a way to do this with the built-in search in IDN, but it would be an advanced query if it is possible. You could just create a script that calls our APIs to generate your report. You will need the following APIs:

  1. Call list sources to a get a list of your sources and their IDs.
  2. For each source, call get accounts and pass the sourceId into the filters query param. This will return all the accounts for the source. You will have to paginate the results if you have more than 250 accounts in a source.
  3. Write some logic in your script to calculate if the LAST_LOGIN date for the account is greater than 45 days. If so, add the account a list that you will use to generate the report.
  4. Once you have all of your inactive accounts, save the list to a format like CSV so you can view the results in Excel.
1 Like
7

@colin_mckibben

Thanks for the information,

I have tried to get accounts for one of my source by passing the source ID in to filters query param in Postman. But it is giving accounts that are actually not present in the source when I look through GUI.

Also can you please help me with below item.

  1. Write some logic in your script to calculate if the LAST_LOGIN date for the account is greater than 45 days. If so, add the account a list that you will use to generate the report. – So this logic need to be written in the body with Post request to the source???

  2. Once you have all of your inactive accounts, save the list to a format like CSV so you can view the results in Excel… - I’m expecting this report to be available in INow->Admin->Global->Reports. So i can just click on generate and download… is there an option to define the report through API.