Remove Access After Account Termination and Reactivate Account

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
3

Hi @SUMANTHB ,

If you’re already configured Postman try these below steps

1. Create Account

  • Method: POST

  • URL: `https://{{tenant}}.api.identitynow.com/v3/accounts`

  • Headers:

    • - Authorization: Bearer {{access_token}}
    • - Content-Type: application/json

  • Body:

{ 
"attributes": {

   "sourceId": "YOUR_SOURCE_ID",

   "name": "john.doe",

   "firstName": "John",

   "lastName": "Doe",

   "email": "john.doe@company.com"

 }
}

Reference: create-account | SailPoint Developer Community

2. Grant Entitlements

  • Method: POST

  • URL: `https://{{tenant}}.api.identitynow.com/v3/access-requests`

  • Headers:

    • - Authorization: Bearer {{access_token}}
    • - Content-Type: application/json

  • Body:

{
 "requestedFor": ["IDENTITY_ID"],

 "requestType": "GRANT_ACCESS",

 "requestedItems": [

   { "id": "ENTITLEMENT_ID", "type": "ENTITLEMENT" }

 ]
}

Reference: create-access-request | SailPoint Developer Community

3. Terminate (Disable) Account

  • Method A: Change Lifecycle State

  • URL: `https://{{tenant}}.api.identitynow.com/v3/identities/IDENTITY_ID/set-lifecycle-state`

  • Body:

   "lifecycleStateId": "TERMINATED_STATE_ID"

Reference: Lifecycle States | SailPoint Developer Community

  • Method B: Disable Account Directly

  • URL : https://{{tenant}}.api.identitynow.com/v3/accounts/ACCOUNT_ID/disable

  • Body:

  { "forceProvisioning": true }

Reference: disable-account | SailPoint Developer Community

4. Revoke Entitlements

  • Method: POST

  • URL: https://{{tenant}}.api.identitynow.com/v3/access-requests

  • Body:

{ 
"requestedFor": ["IDENTITY_ID"],

 "requestType": "REVOKE_ACCESS",

 "requestedItems": [

   { "id": "ENTITLEMENT_ID", "type": "ENTITLEMENT" }

 ]
}

Reference: New Capability: Entitlement Revoke API

5. Reactivate (Enable) Account

  • Enable Account

  • URL: https://{{tenant}}.api.identitynow.com/v3/accounts/ACCOUNT_ID/enable

  • Body:


   { "forceProvisioning": true }

Reference: enable-account | SailPoint Developer Community

  • Unlock Account (if locked)

  • URL: https://{{tenant}}.api.identitynow.com/v3/accounts/ACCOUNT_ID/unlock

  • Body:



   { "forceProvisioning": true }

Reference: unlock-account | SailPoint Developer Community

  • Restore Lifecycle State

  • URL: https://{{tenant}}.api.identitynow.com/v3/identities/IDENTITY_ID/set-lifecycle-state

  • Body:



   { "lifecycleStateId": "ACTIVE_STATE_ID" }

Reference: Lifecycle States | SailPoint Developer Community

Follow these five steps in sequence within your configured Postman environment to create an account, assign entitlements, terminate and disable it, revoke entitlements, then re-enable and unlock the account.

1 Like