Integrating Webservice Application with Sailpoint IIQ 8.4 using Webservice Connector

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.4

Share all details about your problem, including any error messages you may have received.

I am able to Provision and Revoke Entitlements. However I could see that the request Executing Status goes in to Verifying state (Which is expected Behavior). However this move to complete state once the “Perform Identity Request Maintainance” Task is triggered. The question is how can I make my request complete as soon as provisioning Task is completed.

2

Hi

Welcome to SailPoint Developer Community.

try adding HTTP operation Get Object for Create account, it will aggregate account immediately after creating. See if that helps you.

– Krish

2 Likes
3

Hi @udayMurali,

To move the status of an Identity Request from “Verifying” to “Completed,” two actions need to be happen.

  • Account Aggregation: If you configure the “Get Object” HTTP operation, this will facilitate single account aggregation. This updates the link record in IdentityIQ with the latest State.

  • Run Perform Identity Request Maintenance: The “Perform Identity Request Maintenance” task, which runs automatically (typically around 1 AM).However, to bypass the automatic schedule and ensure the request transitions to “Completed” as soon as the provisioning task is finished, you can create an After Provisioning Rule that scans the Identity Request and programmatically updates its status to “Completed” as soon as the provisioning process is complete.

You can add the below logic in after provisioning which will scan the identity request.

Attributes args = new Attributes();
IdentityRequestProvisioningScanner scanner = new IdentityRequestProvisioningScanner(context,args);
scanner.scan(identityRequestID);
4

@ Arun Kumar

Thanks for the suggestion, Just wanted to know how can I extract / get identityRequestID in AfterProvisioning Rule? I see Plan, but how can I extract that?

5

Hi @udayMurali,

From the plan, you can get the identityRequestId. Please refer the code.

 if (plan != null) {
    ProvisioningResult provisioningResult = plan.getResult();
      for (AccountRequest accountRequest : plan.getAccountRequests("Application Name")) {
          if(accountRequest != null && accountRequest.getResult().getStatus().equalsIgnoreCase("Committed")){
            String identityRequest = plan.get("identityRequestId").toString();           
          }         
    }
  }
6

Hi Arun Kumar,

Mean while I was able to get the identityRequestId, however I still see that that Request Execution status is still in Verifying state, I am trying to check it and debug.

-Regards,
Uday

7

Hi @udayMurali,

After provisioning rule should include the IdentityRequestProvisioningScanner, which will handle the identity request maintenance for the specified identity request.

if (plan != null) {
    Attributes args = new Attributes();
    IdentityRequestProvisioningScanner scanner = new IdentityRequestProvisioningScanner(context,args);
    ProvisioningResult provisioningResult = plan.getResult();
      for (AccountRequest accountRequest : plan.getAccountRequests("Application Name")) {
          if(accountRequest != null && accountRequest.getResult().getStatus().equalsIgnoreCase("Committed")){
            String identityRequest = plan.get("identityRequestId").toString();    
            IdentityRequest ir = context.getObject(IdentityRequest.class,identityRequest);
          
         scanner.scan(ir);			
          }         
    }
  }
8

I ran the below code in After Provisioning Rule, but Request is still in Pending, Execution Status is Verifying, Provisioning Status is Commited

import sailpoint.api.IdentityRequestProvisioningScanner;
import sailpoint.object.IdentityRequest;
import sailpoint.object.Attributes;
import sailpoint.object.QueryOptions;
import sailpoint.object.Filter;
Attributes args = new Attributes();
String strIdentityRequest = plan.get("identityRequestId").toString();
IdentityRequestProvisioningScanner scanner = new IdentityRequestProvisioningScanner(context, args);
QueryOptions ops = new QueryOptions();
ops.add(Filter.eq("name", strIdentityRequest));
int requestTotal = context.countObjects(IdentityRequest.class, ops);
List ids = new ArrayList();
IdentityRequest ir = null;
if (requestTotal == 1) {
    ir = context.getObjectByName(IdentityRequest.class, strIdentityRequest);
    if (null != ir) {
        System.out.println("IdentityRequest = " + ir.toXml());
        scanner.scan(ir);
    }
}

Log captured below,

strIdentityRequest —> 0000013954
requestTotal —>1
Scanner Executed on —>sailpoint.object.IdentityRequest@36091845[id=0a801e9793051b9681930575ff1f00fd,name=0000013954]

9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.