Update LCS for identities using API

[shaileeM (Shailee Mehta)]

Dear All,

Wanted check if there is some way to modify LCS of an identity via API?

Thanks,
Shailee

[baoussounda (Ousmane N'DIAYE)]

Hi @shaileeM ,

You can set a lifecycle state with this api : set-lifecycle-state | SailPoint Developer Community

[vguleria (Vikas Guleria)]

Hi Shailee,

As @baoussounda mentioned, it is possible to update the lifecycle state of the identity using below endpoints

{{baseUrl}}/identities/:identity-id/set-lifecycle-state

where identity-id is the identity of the ISC identity. It will be POST method and you will need to pass the cloud lifecycle state id in the body like below

You can get the cloud lifecycle state id using the below API.

METHOD -GET

https://{{ORG_NAME}}.api.identitynow.com/v3/identity-profiles/:IDENTITY_PROFILE_ID/lifecycle-states

where identity profile id should be the id of the id profile which contains your cloud lifecycle state.

So in my experience when doing it via external scripts, i make first call to get all the identity profiles and then for each identity profile then make a call to get their life cycle state and check where the lifecycle state exists, and then only make the set lifecycle state API.

In case of issues, please let us know.

Regards
Vikas.

[baoussounda (Ousmane N'DIAYE)]

@shaileeM in addtionnal and as remark, you must care about updating lifecylestate by api because in each identity refresh or identity process a lifecyclestate must be recalculted automatically for an effecient JML processes.

I will give you a complete example here :

1. Initial lifecycle state :

2. updating it via Postman with set-lifecycle-state | SailPoint Developer Community endpoint :
   a. Retreving list of lifecycstate of an identity profile by using list-lifecycle-states | SailPoint Developer Community endpoint :
   

   
   
   for this your identity profile id can be retrived directly throughout interface or by using list-identity-profiles | SailPoint Developer Community endpoint

   b. Update lifecyclestate for an identity :

In the body the id is the unique id of one of the lifecycle state retrieved in setp a. I use id of “inactive” lifecycle state.

3. Verify Identity :
   As you can remark below a lifecycle state is updated :