Unable to fetch IdentitySnapshot id from Identity certification History(Entitlement owner certification)

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.3

Please share any images or screenshots, if relevant.

IdentityCertificationHistory.png
IdentityCertificationHistory.png1807×553 78.1 KB

Share all details related to your problem, including any error messages you may have received.

Hello experts hope everything is going great,

I’ve been working on a use case where i had to fetch the IdentitySnapshot ID from Latest certification done below is the code which i used

Identity id = context.getObjectByName(Identity.class,“user16”);
CertificationLink cl_mngr = id.getLatestCertification(Certification.Type.Manager);
CertificationLink cl_entowner = id.getLatestCertification(Certification.Type.DataOwner);
String idsnapshot_id_mngr = cl_mngr.getIdentitySnapshotId();
String idsnapshot_id_entowner = cl_entowner.getIdentitySnapshotId();
return idsnapshot_id_mngr + " " + idsnapshot_id_entowner;

o/p :- c0a801038cfc1e86818cfcc61cad0349 null

User that was mentioned here has undergone both Manager and Entitlement owner certification,I was able to fetch the IdentitySnapshot id from manager CertificationLink.But it isn’t possible with Ent owner certification link.
I’ve attached the screenshot of Identity Certification History to this post.Could you please address this issue,if you feel there is a bug with Entitlement owner certification please suggest an alternative

Thanks :slight_smile:

2

Hi Lohith,
Did you maybe checked if DataOwner certification has the snapshot present in the identity object? Just simply open identity in debug and it should be there.

1 Like
3

Hey Kamil,

<CertificationLink completed="1705048003569" id="c0a801038cfc1e86818cfcc61c850348" identitySnapshotId="c0a801038cfc1e86818cfcc61cad0349" modified="1705048003571" type="Manager">
  <Certifiers>
    <String>1c2c3c</String>
  </Certifiers>
</CertificationLink>

<CertificationLink applicationId="c0a801048afa18e3818afadf56e7034b" completed="1705050634192" id="c0a801038cfc1e86818cfcee58980400" modified="1705050634198" type="DataOwner">
  <Certifiers>
    <String>spadmin</String>
  </Certifiers>
</CertificationLink>

Below are two different certificationlinks which i can see in Identity xml one is for Manager certification and other for Entitlement owner certification. IdentitySnapshotid is only present for manager not for Eowner

4

Yeap that’s the root cause why you have null value in the snapshotId when you try to take it from the link.

I suspect that for DataOwner certifications Sailpoint might not create identity snapshots like it does for Manager certification. Because honestly it’s not really needed.

You might try to use ID from the certification link to get the Certification object and then from the CertificationItem for the particular identity get the snapshot ID or entitlement snapshot id if it is present there.

5

By using this approach i would be able to fetch the identity snapshot created during manager certification right kamil,because here we’re fetching the identity ultimately

My requirement is to fetch the snapshot created during ent owner certf

Correct me if i’m wrong

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.