 |
Description | Search Loopback SaaS Connector |
 |
Legal Agreement | By using this CoLab item, you are agreeing to SailPoint’s Terms of Service for our developer community and open-source CoLab. |
 |
Repository Link | https://github.com/sailpoint-oss/colab-saas-conn-search-loopback |
 |
New to SaaS connectors in the CoLab? | Read the getting started guide for SaaS Connectors in the CoLab. |
 |
Supported by | Community Developed |
Overview
The Search Loopback SaaS Connector lets you define entitlements as SailPoint search queries, automatically assigning them to identities that match your search criteria and giving you more flexibility in role assignment criteria.
You can configure entitlement mappings in the connector settings where each entitlement name corresponds to a SailPoint search query. During account aggregation, the connector executes these queries through the Search API and assigns the entitlements to matching identities. This creates a bridge between SailPoint’s search capabilities and role assignment criteria.
This connector allows you to create role criteria based on any identity search query. The assigned entitlements can then be used in standard role assignment rules just like any other entitlement.
Requirements
@sailpoint/connector-sdksailpoint-api-clientaxiosaxios-retry
Guide
Installation
Follow the standard SaaS Connector installation process outlined in the Getting Started with SaaS Connectors in the CoLab.
_manager Keyword
Appending “_manager” to the end of the entitlement name will assign the entitlement to all the managers of the returned identities. For example, in the table below, the contractor_managers entitlement would be assigned to all managers of identities that have an employeeType of “Contractor” and a cloudLifecycleState value of “active”.
Example Entitlement Mappings
| Entitlement Name | Search Query |
|---|---|
| inactives_with_access | attributes.cloudLifecycleState:“inactive” AND entitlementCount:>0 |
| upcoming_new_hires | attributes.startDate:[now-1w TO now] |
| identities_without_costcenter | NOT _exists:attributes.costCenter |
| contractor_managers | attributes.employeeType:“Contractor” AND attributes.cloudLifecycleState:“active” |
Identities Returned by Multiple Queries
The same identity can be included in multiple search queries. The connector will recognize this and assign multiple entitlements to the same identity.