I need help automating retrieval of data from a SailPoint report that feeds into a downstream process outside of SailPoint. We currently use a Report that displays all the Access Requests submitted and the report is parsed for specific end users. This was set up by a contracting firm so I’m not sure what the underlying query is or what out-of-the-box report template was used to build it, but it is named specific to our firm so I don’t believe it’s OOTB. Every day we have to login to Advanced Analytics → Reports, run it and download the extract. Then we kick off a script to parse the extract and join relevant data for audit.
How can I schedule this report to be placed somewhere so our parsing process can be automated?
For example - can it be SFTP’d (credentials or key pairing)? NAS mount? Is the extract stored in a temp file on one of the nodes so I can pick it up there?
If none of the above can you help find the underlying query? If not can I leverage the API to retrieve Access Request information (didn’t see anything on https://community.sailpoint.com/t5/Other-Documents/IdentityIQ-8-1-SCIM-API-Documentation/ta-p/177751…talking about Access Requests)?
Thanks for posting, I will ask around internally to see if anyone knows the answer to your question. It seems as though your issue is likely going to be very specific to your environment. So this particular question sounds like a good candidate for Customer Support to solve as it could be specific to your environment. You might try opening a support ticket at support.sailpoint.com. If you do get an answer from support, we would love to see it in this thread.
I tried opening a support case and received the following response:
https://support.sailpoint.com/hc/en-us/requests/99702
Sorry about the confusion. In Support we usually get break/fix issues.
SailPoint Support provides break/fix problem resolution assistance. Configuration and “How do I” issues unfortunately are outside of both the expertise and scope of the Support organization.
These issues are better handled by members of our Compass Community forums or the SailPoint Professional Services group.
If you can’t make headway using Compass, you can reach out to your SailPoint Customer Success Manager (CSM) Samantha Pedraza to engage our Expert Services team, which is a billable service unless you have hours in your contract. Samantha is most familiar with your contract and can discuss what options might be available.
Yitshak Merin, CISSP
SailPoint Technologies
So I posted on the forum and there was one response pointing to a blog but it talks about coding and I think that’s beyond our ask. The other post directed me to the developer forum:
https://community.sailpoint.com/t5/IdentityIQ-Forum/Report-Extract-SQL-Query-API-Query-To-Feed-Into-Downstream/m-p/193401#M152613
So that’s why I posted this here.
Here’s what I have learned: You can schedule the report to run, but getting the extract is not exactly straightforward from a programmatic perspective, we store the results in a set of tables
we can send an email to recipients and can specify the report extract as a csv
Your idea and code block seems a good solution to getting the report onto a file system
Take a look at the resources below:
sailpointworks.blogspot.com
Sailpoint IdentityIQ Copy Report to Server Directory
To get the “query” you would need to look at the java executor and/or data source in the report and then, most likely, reverse engineer the code. This would not be the simplest of tasks to accomplish.
I’m looking into the sailpointworks blog post solution. If I need to drop the file to a NAS do I need to make sure the sailpoint application account has the AD group permissions or do I need to put some additional configuration into the script?