Getting an identity based on his userName or emailaddress

IdentityIQ (IIQ) IIQ Discussion and Questions
1

I’m not an experienced API user. But I’m trying to get along with the IIQ API, but I only get information from a user based on his id. Is it possible to get information of an identity based on one of his attributes? Like username or emailaddress?

What I have tried, but isn’t working.:
/scim/v2/Users/BerendsenD?attributes=userName

Thanks for the help

2

You can filter the request
/scim/v2/Users/?filter=userName co “USERNAME”

But it depends on the version of IIQ you are using.
Have you had a look at the API site ? IdentityIQ API | SailPoint Developer Community

3

We are using version 8.1 of IIQ.

I have checked the documentation, but I couldn’t see some examples. I guess I’m not their audience :slight_smile: But I am doing some pre-research.

I’m trying the endpoint in the browser, but your solution won’t work for me, I get an 400, invalid filter scim/v2/Users/?filter=userName%20co%20BerendsenD

4

try
/scim/v2/Users/BerendsenD?lookupByName=true

5

@karena

/scim/v2/Users?filter=urn:ietf:params:scim:schemas:core:2.0:User:userName eq “Adam.Kennedy”

or

/scim/v2/Users?filter=urn:ietf:params:scim:schemas:core:2.0:User:emails.value eq “[email protected]”

Depending on the attribute, you need to prepend the full SCIM Urn like I did above. In IIQ you can go to debug pages, Configuration objects → SCIMConfiguration and see all the SchemaPropertyMappings for each object type, and then the individual attributes attached to that object. So for useres you’ll see core user, sailpoint user, and enterprise user mappings.

6

This one is working. What does that mean? That I have to use other documentation?

https://acc-iiq.domain1.local/identityiq/scim/v2/Users?filter=urn:ietf:params:scim:schemas:core:2.0:User:userName%20eq%20"BerendsenD"
Correcton: This one is working.

EDIT: Not sure why, but this one works now.
/scim/v2/Users?filter=urn:ietf:params:scim:schemas:core:2.0:User:emails.value eq “[email protected]”

7

@adam_creaney Strange, that must be a difference between 8.0 and 8.1.
On 8.0 I can just put in ?filter=userName co “USERNAME” and it works.

@zeross

I have no idea what that means. I looked at the the endpoint documentation I linked and it said that was a required field. At a guess it means that it will search on username instead of by the internal IIQ unique identifier

8

Is it possible to use multiple filters?

/v2/Accounts?filter=urn:ietf:params:scim:schemas:sailpoint:1.0:Account:identity.value eq “0a0b9a0b7c5918b4817c5adf34db515f”

Is it possible to use above filter + the filter Account:application.displayName eq “VALUE”