How is possible to create identity from APIs

Hello everyone, I’m looking a way to create identities trough workflow using APIs, in particoular I’m trying to create accounts for a fake authoritive source to be able to create identities from it. The problem is that i don’t know how to compute a unique ID because i have to perform that trough API without using information like name, lastname or email.
So i’m looking a way to compute a unique ID based on the capabilities that workflow offers.

1 Like

@s_tartaglione In ISC specifically, there is no API that would help creating standalone or orphan identities in ISC system. An identity in ISC must always come from an authoritative source associated to an identity profile. (Be it connected or disconnected source)

So in your case, I’m assuming you’re trying to create an auth source and want to create identities from it? If yes, then you might want to play around with a delimited based source and then associate it with an identity profile. You cannot do it via workflows as there exists no such API call as of today.

One thing to note here is that SailPoint Username must always be directly mapped to an account attribute on identity profile level. You should not even associate a transform on the SailPoint Username attribute because it is the unique identifier for any identity and must not be generated inside ISC system, rather it must be fetched from the auth source via direct mapping.

As @Arshad said, you can use a delimited file source to manage the accounts for the identities you are trying to create. Tie an identity profile to this source and it will create identities for new accounts. You can use the Accounts APIs to manage the accounts on your delimited file authoritative source from workflows. For example, you could use the HTTP Request action to invoke the create account endpoint. This would create the account in your delimited file source and then create the identity automatically. If you decide to manage this source using APIs, take care that you don’t ever run an aggregation via file upload, as that will overwrite any accounts you created via the API.

I cannot think of a way to create unique ID in the workflow for a source.

However, I don’t think you have explained your requirement clearly. Where are you getting the other details (name, last name etc) from for the account?

Can you also provide some details on what are you trying to achieve here

The other informations are taken by the interactive form that the user submit, while the ID of the identity should be computed by the workflow to have a unique one ID

1 Like

There is no such possibility to create a unique ID in Workflow. You will have to maintain an external repo (like a database table) to create a unique ID and read it back in the workflow.

May be use a JDBC source as the auth source for these new identities being created?

You can use a Delimited File source as a unique ID database, but you would need a cloud rule to generate the unique ID attribute.

And then you can use what Colin mentioned to accomplish the rest.

1 Like

Can you please elaborate what type of cloud rule you can use for this when the source is a Delimited file.

I have never had a chance to write a cloud rule for delimited file source and now I am intrigued by your response :smiley:

I showed it off here: Leveraging workflows for a fully native unique ID database - Content / Video Library - SailPoint Developer Community

2 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.