Non-Employee Data import to NERM system from a third party Vendor

Is there any guidance or documentation available on how an existing third party vendor non employee data can be fed into NERM system?
I went through all the SailPoint docs but was not able to find anything regarding this.
I have a use-case where a client has all their non-employee data on a different vendor and wants to import their non employee user data into NERM system and later integrate NERM system with IdentityNow for access provisioning.
Appreciate any help on this topic.

Store Non-Employees in the built-in “People” profile. Once you have the Profile and necessary attributes defined either export the users to a csv and import via the “Import” button in the front-end. Or use the “profiles” API endpoint to POST a list of profiles. I don’t think it’s documented clearly, but the APIs can only accept lists of 100 users at a time so you’ll need to paginate your writes.

Once your initial load is complete manage the People Profile using a generic WebService pointing to the “profiles” endpoint - but note you need to filter by profile_type_id - this is unique to each instance so you’ll need to retrieve the appropriate ID for your People profile type. My context URL is “”/profiles?profile_type_id=6ed995d8-1d06-4b3a-9c1f-774fc7b2db1e"

1 Like

Can you clarify if this is a one time load (i.e. migration) or a parallel system?

@KevinHarrington explained the basic process of getting the people loaded, but then there’s another step of adding the assignments.

NERM does not provide the ability to aggregate data from other sources which means it’s a PUSH from System1 → NERM vs. NERM PULLing data from System1. This becomes challenging when operating in a parallel mode.

Side note - There’s a specific category for NERM related questions :slight_smile:

Thanks @KevinHarrington. And just to understand the import functionality in detail, what would be the template/columns that need to be followed in the import file?

Hello @edmarks,
Yes, you’re right, this query is more towards one time load (i.e. migration) where we have all the non-employees stored in a database currently.

Also, agreed with the functionality of NERM to receive or push the data external systems. I believe this responsibility lies with the client applications outside of NERM to leverage the NERM REST APIs to read/write data from NERM indirectly.

And please do add on how the assignments can be taken care of once the one time load is complete.

As I can see, this post has been submitted under “Non-Employee Risk Management” category. Please do let me know otherwise.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.