Inquiry Regarding Certification Campaign Creation via API

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi,

On ISC UI, we can create campaign using search as follows:

  1. Search for specific identities using queries, e.g. source.name=“Active Directory”
  2. Choose Manager as reviewer

I am attempting to replicate this process and create a certification campaign using the API. However, I have noticed that I can only use the “Search” type if I want to utilize queries, and there is no option to select “Manager” as the reviewer for the “Search” type.

I think I could use the “Manager” type certification and apply a campaign filter to achieve a similar result. However, the behavior in the ISC UI does not seem to align with the functionality provided by the APIs.

2

For your information, I am following this API spec.

3
  • The ISC UI lets you create a campaign using a Search-based filter and still choose “Manager” as the reviewer, which is intuitive but not fully exposed via the API.
  • The Certification Campaign API currently enforces that if you use "type": "SEARCH", you cannot set "reviewerType": "MANAGER" — this option is only available for "type": "MANAGER" campaigns.
  • To replicate the UI behavior via API, you should use type "MANAGER" and apply a campaign filter that matches your intended search query (e.g., source.name eq "Active Directory").
  • Unfortunately, campaign filters don’t support the full flexibility of search queries (like nested logic or cross-source conditions), which limits the precision of this workaround.
  • A potential enhancement request can be raised with SailPoint to unify UI and API capabilities — meanwhile, your best bet is to approximate the logic using "type": "MANAGER" and filter parameters.
4

Thank you Nalabolu, we will use campaign filter instead.