SCIM API Roles Endpoint Doesn't Return Profiles Information

Details/Business Problem:

SCIM API /scim/v2/Roles/ doesnt retrive Profiles information (app ref and constraints). We were able to see all details of Bundle/IIQ IT role except Profiles tag information from API response.

Business Justification:

Dont see any security reason why profiles information of bundles as part of /scim/v2/Roles/ API response from IdentityIQ. This would be more useful information to know what specific application entitlements were added as direct entitlements to IIQ bundle/role.

You can create a custom REST endpoint which returns the desired level of Role information by implementing a custom IdentityIQ Plugin.

See the Plugin Developers Guide on Compass for details: https://community.sailpoint.com/t5/Plugin-Documents/Plugin-Developer-Guide/m-p/79347

2 Likes

thank you for information. am very glad to know about plugin developers guide. Any specific reason, profile info is not available as out of box SCIM endpoint /scim/v2/Roles/.