SailPoint IdentityNow VS Code Extension Now Available

Announcements
62

This is awesome!!! Thank you :slight_smile:

63

The latest update stopped working on a fedramp instance. you check for instances that are called identitynow.com but fedramp ones are call customer.saas.sailpointfedramp.com. Please update the code back to allow for fedramp instances.

64

Hi @colin_mckibben ,

I have integrated Vs code to my partner tenant and tried to test workflow but it is in disabled state I’m attaching my query in discussion forum here

thank you

avi.

65

I am having issues with getting timeouts trying to export roles and access profiles.

Error running command vscode-sailpoint-identitynow.csv.export.roles-icon.view: Rate Limit Exceeded . This is likely caused by the extension that contributes vscode-sailpoint-identitynow.csv.export.roles-icon.view.

66

I am having the same issue. I thought it was due to the size of our Roles and planned to investigate later. I’ll comment for additional visibility.

Is this extension officially supported?

67

@colin_mckibben Is this officially supported?

68

This is not an official SailPoint tool. It is a community built and supported tool.

69

Hi @colin_mckibben / @yannick_beot

Can you please help us in getting this extension updated with latest changes on the SP-Config APIs to pull connector rules.

Problem : When we export tenant configuration, the exported files no longer contain connector rules and this is due to a recent change made on the SP-Config API as per SaaS release notes here - https://community.sailpoint.com/t5/SaaS-Release-Notes/SaaS-Release-Notes-January-13-2025/ta-p/262885

Fix:
Due to this change, below is the updated expectation from SP Config API call to pull the rules-

{
  "description": "Export all available objects",
  "excludeTypes": [],
  "includeTypes": [
    "RULE",
    "CONNECTOR_RULE"
  ],
  "objectOptions": {}
}

Where:

  • RULE = Cloud Rules
  • CONNECTOR_RULE = Connector Rules

As per the older API config, since CONNECTOR_RULE was not part of the backend code of the extension, we are unable to export connector rules using this extension. I’ve seen a lot of posts on the community facing this same issue.

Expecting a fix or an update on this as this extension solves a great deal of problems for us developers :slight_smile:

Thanks,
Arshad.

70

I’m also facing the same issue with the SP-Config API changes. The recent update has caused the exported files to no longer contain connector rules and these modifications seem to be breaking the VS Code extension’s connector rule export functionality.

72

@yannick_beot @cristian_grau

Just wanted to express my appreciation for this tool. I’ve been using it for years and honestly, it’s such a game changer. I probably spend more time working in the extension than I do in the UI at this point. I’ve been working with IDN/ISC since 2017, in 4 different environments on the customer side and a dozen more from the partner side, and this extension makes managing ISC so much easier. This is honestly such an essential tool at this point, so thank you for all you’ve done/all you do!

-Mark

7 Likes
73

I am planning to create roles using the VS Code extension and need a template for the import file. Could anyone provide a CSV file template with all the correct headers for role creation?

74

Hi @uppala
You can have a look at the documentation about the necessary fields: SailPoint Identity Security Cloud - Visual Studio Marketplace

My recommendation is to export roles so you can have good examples.
This is usually how I do it: I create 1 role as a template, export roles and then derivate roles in terms of name, membership criteria or else.

75

Thanks, it worked, is there any limitation of importing roles via CSV File.

76

In terms of number?
The usual limit.
You may have some 429 issues…
I tried to manage this.
I have imported hundreds of roles.
How many do you need?

1 Like
77

700+ Roles, we are trying to create one role to 1 AP or 1 ET to resolve workday accounts provisioning issues (while Provisioning Bulk Access Profiles)

78

You should be fine!

Envoyé à partir de Outlook pour Android

79

Can I use entitlements instead of access Profiles in input file? if yes still do we need access profile column?

81

@yannick_beot - love this tool that you have provided for all of us to use. I am in need of some assistance though, as when I try to export a campaign status report, we are not seeing the full list of items to be pulled. Mainly, those that are a Role with only Entitlements. Wondering if there is some way to get around that in the reporting?
Your Status Report is awesome in that it shows the inner workings if there is a Privileged entitlement or not, where the OOB Status Report does not have this, and our audit team is looking for the report to include this information. Any assistance would be greatly appreciated!

82

@masd this part was actually built by @Bassem_Mohamed before we had the ability to directly associate entitlements with roles.

Checking the code, it shouldn’t be too complicated to include it. We’ll try to get it added in with the next version.

1 Like
83

Wonderful news and thank you to @Bassem_Mohamed for this!

1 Like