Replaced by the following APIs
Hi @colin_mckibben,
I have compared the old /api/org/get and new API you mentioned /beta/org-config, and they give almost complete disjunctive information. Are you pointing to the correct replacement API?
The old API gave us the following categories of information that we don’t see in the mentioned replacement:
Information regarding the selected default branding (it is not containing information regarding additional branding objects we have defined, as you can see in /cc/api/branding/list). There is no replacement API to get/set all branding objects, but we also need to get/set the default selected branding, which might not always be the one called default right?
Information regarding which password policy gets applied to IdentityNow itself. Through the UI you can add sources to different password policies. How can after deprecation, change the password policy that IdentityNow itself adheres to when we don’t use SSO or use the admin backdoor? Technically the password policy configuration should be visible in whatever API will replace /api/passwordPolicy/list (which is not mentioned yet), but we would still need to be able to get and set the chosen password Policy for IDN.
Which features are enabled on the tenant. For an IdentityNow Engineer we use this field to see which features are enabled. Does it have Forms, does it have AI related functionality and if so, which ones, SOD? which API will show this information now?
Tenant specific information like name, domain, logo, dateCreated, region, orgType, status, maxRegisteredUsers, ssoDomain, userCount. This information is not visible in the mentioned replacement API.
Security Settings. In the UI you can update security settings that you could do through this deprecated API. Which API will replace this functionality? The mentioned API does not offer it. This is regarding Configured number of **security questions** setup and needed per session, Lockout Management (like number of attempts of wrong login before account gets locked), Session Management (how long before we get logged out), Service Provider, (i.e. which SSO URL to go)
global email redirection settings (emailTestMode, emailTestAddress), I know that this part is replaced by /beta/notification-preferences/email-test-mode
PasswordReplay Settings, although I can’t quickly recall what this does.
Network Settings, which IP block can use IDN and which countries are blocked.
There are some more single fields, of which I don’t know its usage, but that is also not supported by the new API you mentioned.
Kind regards,
Angelo
Thank you for the detailed writeup Angelo. I will pass this along to the product team for review.
1 Like
Hi @colin_mckibben, do you have an update on this one?
I see that the two different APIs still give different information. So if the /cc/api/org/get API gets deprecated before the new API is fixed, we will lose information.
Kind regards,
Angelo
@angelo_mekenkamp does this endpoint provide the missing information? get-tenant | SailPoint Developer Community.
Colin, to add to Anjelo’s remarks, I was also looking for a replacement for /api/passwordPolicy/list but there does not appear to be one yet as the IDN web UI is still leveraging /api/passwordPolicy/list to get it’s information. Do you know when/if this replacement will be available?
(It is technically part of my dev days presentation if it matters)
This has been announced here: GET /api/passwordPolicy/list
It’s been extended to June 14th.
1 Like
I tried searching for it but couldn’t find anything. I think that’s been brought up though that discourse sucks at search with a / involved though.
Indeed. you have to be very precise with your search. Always start the search with /api
1 Like
Hi @colin_mckibben,
It does provide the information for the features, the other attributes I mentioned that don’t have a beta/v3 API available are not provided here.
kind regards,
Angelo
@angelo_mekenkamp I just added another endpoint to the post above that gets the network config settings.
It appears that we are releasing things in beta/v3 so fast that I’m not able to keep up with it. Can you tell me specific attributes you need that you aren’t seeing? There may be an endpoint for them in another location.