# SailPoint IdentityNow PowerShell Module

**URL:** <https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196>\
**Category:** SHF Community Knowledge Base\
**Created:** [March 1, 2021, 11:25pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196 "2021-03-01T23:25:59Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [March 1, 2021, 11:25pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/1 "2021-03-01T23:25:59Z")

</div>

Hi Developer Community. Great to see this community come to fruition.

Previously I’ve posted about the SailPoint IdentityNow PowerShell Module on [Compass](https://community.sailpoint.com/t5/user/viewprofilepage/user-id/9423), but now with the Developer Community I’d like to solicit any feature enhancements, or even others that would like to participate (via pull requests) in keeping the functionality current.

If you’ve not previously seen or used the module, the summary of the latest version (1.1.2) can be found [here](https://blog.darrenjrobinson.com/release-1-1-2-sailpoint-identitynow-powershell-module/).

The repo with all the latest info and full readme is on Github [here](https://github.com/darrenjrobinson/powershell_module_identitynow).

Cheers,  
DR

---

<div class="post-metadata">

**Author:** ![julico](https://avatars.discourse-cdn.com/v4/letter/j/48db29/32.png) [@julico](https://developer.sailpoint.com/discuss/u/julico)\
**Post date:** [March 2, 2021, 12:05pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/2 "2021-03-02T12:05:35Z")

</div>

Thanks Darren,

I’m already a fan. Thanks very much for your invaluable module!  
I’m going to be spending some time in here as I’m embarking on some Jira to IDN integration to get tickets raised for manual provisioning and I’m really hoping the community can help.  
Cheers  
Julian

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [March 2, 2021, 12:59pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/3 "2021-03-02T12:59:35Z")

</div>

Hey Darren, thanks so much for sharing this! I’ve went ahead and moved your post over to the Tools subcategory and I’m going to sticky your post to the top 🙂

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [March 2, 2021, 1:00pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/4 "2021-03-02T13:00:22Z")

</div>



---

<div class="post-metadata">

**Author:** ![pmartinezclango](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@pmartinezclango](https://developer.sailpoint.com/discuss/u/pmartinezclango)\
**Post date:** [March 5, 2021, 4:00am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/5 "2021-03-05T04:00:02Z")

</div>

Ran across your module a few months back and it’s such a great contribution to the IDNow community. Many thanks!

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [March 5, 2021, 2:48pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/6 "2021-03-05T14:48:07Z")

</div>

Thanks Phil, we are very glad to hear that you like it!

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [March 5, 2021, 11:45pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/7 "2021-03-05T23:45:13Z")

</div>

Originally I developed the module for a bunch of integration and automation we were doing for a customer. I had a huge number of scripts, but they weren’t manageable by our Managed Services team. So I built the original module and then release it as open source.

Later with [Sean McGovern](https://twitter.com/410sean) who’d started something similar, we combined our efforts and knocked out extending the functionality and standardized the authentication as the IDN platform changed.

It’s fantastic to see the number of downloads increasing, and hearing feedback of from the many users of it to automate implementations and bulk configuration tasks.

Cheers,  
DR

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [June 21, 2021, 9:12pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/8 "2021-06-21T21:12:13Z")

</div>

I have just released v1.1.4 of the SailPoint IdentityNow PowerShell Module.

More details for the [updates here](https://blog.darrenjrobinson.com/release-1-1-4-sailpoint-identitynow-powershell-module/) and it is published to the [PowerShell Gallery](https://www.powershellgallery.com/packages/SailPointIdentityNow/1.1.4).

There are 4 new cmdlets bringing the total now to over 90.

- _ **Export-IdentityNowConfig** _
- _ **Invoke-IdentityNowAccountCorrelation** _
- _ **New-IdentityNowSourceEntitlements** _
- _ **Search-IdentityNow** _

Numerous enhancements and updates to other cmdlets for recent API and Authentication changes.

Cheers,  
DR

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [July 12, 2021, 11:55pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/9 "2021-07-12T23:55:33Z")

</div>

v1.1.5 of the SailPoint IdentityNow PowerShell Module is now published on the [PowerShell Gallery](https://www.powershellgallery.com/packages/SailPointIdentityNow/1.1.5).

No new cmdlets, but [fixes to a couple as well as enhancements](https://github.com/darrenjrobinson/powershell_module_identitynow/pull/42).

1. Fix for **New-IdentityNowCertCampaign** bug whereby AuthN failed.
2. Updates to **Get-IdentityNowCertCampaignReport** to handle API AuthN changes.
3. Add additional detail to **New-IdentityNowIdentityProfilesReport** Report to show transforms
4. **Get-IdentityNowCertCampaignReport** New functionality to return all reports within a period with an option to return incomplete or completed campaign reports.
5. Associated **ReadMe** updates.

Cheers,  
DR

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [July 13, 2021, 2:59pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/10 "2021-07-13T14:59:12Z")

</div>

Thank you for sharing this update, @darrenjrobinson!

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [October 27, 2022, 12:54am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/11 "2022-10-27T00:54:37Z")

</div>

I’ve just published v1.1.6 of the Community IdentityNow PowerShell Module.  
[Supporting blogpost here](https://blog.darrenjrobinson.com/release-1-1-6-sailpoint-identitynow-powershell-module/)

**Private APIs to v3 API transition**  
Key item is the start of the transition from private APIs to v3 APIs.  
To make this more seamless and provide backwards capability the three updated cmdlets for v3 APIs maintain backwards capability without any changes. To use the v3 APIs with the three cmdlets you need to specify the -V3API switch.

The three cmdlets with the V3API switch are:

- Update-IdentityNowRole
- Get-IdentityNowSource
- Update-IdentityNowSource

Finally, I’d love to have more assistance maintaining this module. Specifically adding new cmdlets for new IdentityNow features and updating cmdlets that now have v3 APIs.

Cheers,  
DR

---

<div class="post-metadata">

**Author:** ![dheerajk27](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/dheerajk27/32/3514_2.png) [@dheerajk27](https://developer.sailpoint.com/discuss/u/dheerajk27)\
**Post date:** [August 16, 2023, 4:02am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/12 "2023-08-16T04:02:48Z")

</div>

> [@darrenjrobinson](#):
>
> ere are 4 new cmdlets bringing the total now to over 90.
> 
> - _ **Export-IdentityNowConfig** _

Hi @darrenjrobinson ,

Thankyou for this wonderful utility, this makes our job lot more easier.

I have installed he module in my local and trying to Test-IdentityNowCredential, but get below error:

```auto
PS C:\Users\DHEERAJ\git\powershell_module_identitynow> Test-IdentityNowCredentials
WARNING: Testing APIv3 credentials failed for devrel-ga-5700. Unable to continue.
WARNING: Unable to auth password grant type for devrel-ga-5700 v2:True v3:True cred:True pat:False
{"error":"invalid_client","error_description":"Unauthorized grant type"}
Personal Access Token not stored in IdentityNow Configuration.

```

i have set client id and secrete by creating config from API Management:

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/a/ac8e4f7de48f27777d70ec98784aed689a846523.png)

am i missing something here?

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [August 16, 2023, 4:19am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/13 "2023-08-16T04:19:56Z")

</div>

Hey Dheeraj. Are you on the latest version?  
Create a Personal Access Token (via the IdentityNow Portal and your personal identity profile/account preferences) and add that to your configuration, test then save.

```auto

```

$orgName = “customername-sb”  
Set-IdentityNowOrg -orgName $orgName

```
# IdentityNow Admin User
$adminUSR = "identityNow_admin_User"
$adminPWD = 'idnAdminUserPassword'
$adminCreds = [pscredential]::new($adminUSR, ($adminPWD | ConvertTo-SecureString -AsPlainText -Force))

# IdentityNow Personal Access Token as generated through the IdentityNow Portal and your personal identity profile preferences
$patClientID = 'yourClientID'
$patClientSecret = 'yourClientSecret'
$patCreds = [pscredential]::new("$($patClientID)", ($patClientSecret | ConvertTo-SecureString -AsPlainText -Force))

Set-IdentityNowCredential -AdminCredential $adminCreds -PersonalAccessToken $patCreds
Save-IdentityNowConfiguration

```

```auto

```

Regards,  
DR

---

<div class="post-metadata">

**Author:** ![dheerajk27](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/dheerajk27/32/3514_2.png) [@dheerajk27](https://developer.sailpoint.com/discuss/u/dheerajk27)\
**Post date:** [August 16, 2023, 4:44am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/14 "2023-08-16T04:44:58Z")

</div>

> [@darrenjrobinson](#):
>
> $orgName = “customername-sb”  
> Set-IdentityNowOrg -orgName $orgName

Hi @darrenjrobinson ,

Thankyou for the response, i am able to run validate the credential now

![image](https://global.discourse-cdn.com/sailpoint/original/2X/9/936fe942efe7851ceb6a97facc9c4353cf170fe1.png)

---

<div class="post-metadata">

**Author:** ![aaronknoph](https://avatars.discourse-cdn.com/v4/letter/a/85e7bf/32.png) [@aaronknoph](https://developer.sailpoint.com/discuss/u/aaronknoph)\
**Post date:** [April 3, 2024, 8:23pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/15 "2024-04-03T20:23:13Z")

</div>

Hi Darren,

I have a whole process to make a new role based on current access that I am trying to figure out:

1. Find out which accounts an identity has (Active Directory, SAP, etc…)

I can get the identity, but the accounts property show like this: `accounts : {}`

1. Once I have that, I need to get the entitlements from the accounts.

2. Add the entitlements to the new Access Profile (that have already been created by workflows).

Any tips would be appreciated.

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [April 3, 2024, 11:44pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/16 "2024-04-03T23:44:02Z")

</div>

Hey Aaron, your best bet is to use Search.  
That can then return all the accounts on sources for an identity.

```auto
Search-IdentityNow -query "name eq darren.robinson" -indice identities  

```

If you want them all under one response then

```auto
$me = Search-IdentityNow -query "accountId eq darren.robinson" -indice identities  
$me.accounts

```

---

<div class="post-metadata">

**Author:** ![aaronknoph](https://avatars.discourse-cdn.com/v4/letter/a/85e7bf/32.png) [@aaronknoph](https://developer.sailpoint.com/discuss/u/aaronknoph)\
**Post date:** [April 4, 2024, 1:29pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/17 "2024-04-04T13:29:29Z")

</div>

> [@darrenjrobinson](#):
>
> `Search-IdentityNow -query "name eq darren.robinson" -indice identities `

That works perfectly! Now I just need to get the entitlements from the specific accounts. I’m assuming I have to use Search-IdentityNowEntitlements. I’ll play with it and see what I can come up with.

---

<div class="post-metadata">

**Author:** ![aaronknoph](https://avatars.discourse-cdn.com/v4/letter/a/85e7bf/32.png) [@aaronknoph](https://developer.sailpoint.com/discuss/u/aaronknoph)\
**Post date:** [April 4, 2024, 1:49pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/18 "2024-04-04T13:49:55Z")

</div>

Hi Darren,

I tried the following where nnn equals the AD account-id for this user:

```auto
Search-IdentityNowEntitlements -query "account-id eq nnn"

```

I got back entitlements, but not the one he actually has. He only has one and it wasn’t in the list. Am I doing this wrong?

---

<div class="post-metadata">

**Author:** ![darrenjrobinson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/darrenjrobinson/32/2854_2.png) [@darrenjrobinson](https://developer.sailpoint.com/discuss/u/darrenjrobinson)\
**Post date:** [April 4, 2024, 2:39pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/19 "2024-04-04T14:39:04Z")

</div>

Search-IdentityNowEntitlements is primarily for getting entitlements associated with a source or just entitlements in general.

Get the accountID of the account you want all the entitlements for.  
Then

```auto
$account = Search-IdentityNow -query "accountId eq e06d19c6ddaa4726baf4dd9e4aa6edfc" -indice identities  
$account.access 

```

---

<div class="post-metadata">

**Author:** ![aaronknoph](https://avatars.discourse-cdn.com/v4/letter/a/85e7bf/32.png) [@aaronknoph](https://developer.sailpoint.com/discuss/u/aaronknoph)\
**Post date:** [April 5, 2024, 2:49pm UTC](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196/20 "2024-04-05T14:49:46Z")

</div>

When I run the following line:  
`$account = Search-IdentityNow -query "accountID -eq useraccountID" -indice identities`  
I keep getting this error:

```auto
Search-IdentityNow : Bad Query or more than 10,000 results? Check your query.
At line:1 char:12
+ $account = Search-IdentityNow -query "accountID -eq NNN ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Search-IdentityNow
 
Search-IdentityNow : {"detailCode":"500.1.503 Downstream service 
unavailable","trackingId":"7d3872ba25d0435d9457cb068d539ec8","messages":[{"locale":"en-US","localeOrigin":"DEFAULT","text":"A downstream resource was 
unavailable."},{"locale":"und","localeOrigin":"REQUEST","text":"A downstream resource was unavailable."}],"causes":[]}
At line:1 char:12
+ $account = Search-IdentityNow -query "accountID -eq NNN ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Search-IdentityNow

```

Any idea why that is? There is nowhere near 10,000 results.

[Next page](https://developer.sailpoint.com/discuss/t/sailpoint-identitynow-powershell-module/196.md?page=2)
